last executing test programs: 15.941716073s ago: executing program 1 (id=2906): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0xd4, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xa4, 0x2, [@TCA_BASIC_EMATCHES={0xa0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x6c}, [@TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="53a080bfa372c9d6", @TCF_META_TYPE_VAR="8681828267c53a32", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="12140867a79804", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x8d8}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xfffffffffffffec4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x1ff}, {0x2, 0x6, 0x4}}}]}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) 3.534238528s ago: executing program 2 (id=3016): r0 = socket$inet(0x2, 0x800, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000290f020000000000000000000000976404000000000000254063a68e3831b62afa67ed0f61f709428706cf40b240f54435563af56d15094107646d9e630f77f37179483bdb61bf33e6a7368bb2132128f68815fa8bb31802f41ccb0b03938952e91a8fdd1ab23d19fa6f27b923337bc3656cceb65ccbd8e131af3858ee81589847c7804c211d1f607d6574a33c94c0f2fb206355b1a23f17", @ANYRES32=0x0, @ANYBLOB="02000000000000001c00128009000100626f6e64000000000c00028008001e0020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="e1362703a63a0e2e74749c7178696218f326e1e1a9307ee1f842727ea9bb522fccd45871794ea09f2bc2ccbe9b0b76caa378b5fa3bae9d2d00000000000000", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000003c0)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000001cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000940)=ANY=[@ANYBLOB="f00000001a00040028bd7000fedbdf2500000000000000000000ffffac1e01016401011b0000000000000000671500004e2000004e2100800a00008015000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="ff010000000000000000000000000001000004d4930000000a0101000000000000000000000000000200000000000000040000000000000080000000000000000189000000000000ffffff7f00000000faffffffffffffff080000000000000000000000010000000900000000000000090000000000000000000000000000000d000000000000000400000003000000020000002dbd7000003500000a0003060200000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x28004040}, 0x4008050) write$rfkill(r2, &(0x7f0000000400)={0x81, 0x7, 0x3, 0x0, 0x1}, 0x8) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0xfffffff9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000001b00000095"], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x36, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83040000000000028006000201000200"/32], 0x38}}, 0x4000000) 3.361427216s ago: executing program 0 (id=3018): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000450)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x40, 0x89, 0x0, @rand_addr=0x1010101, @empty}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'sit0\x00', 0x1}) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="450000280000000040897448020202020101010100"/40], 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a0001000000000000a3ae008180000000000008"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000006c0)={0x1, 0xd, 0x401, 0x4, r6}, &(0x7f0000000700)=0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r7, 0x5450b000) 3.11272622s ago: executing program 2 (id=3021): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x1a0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000000ec0)=""/225, 0x0, 0xe1, 0x0, 0x1}, 0x28) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf251b000000a7ad92e5fff793f0dd5cf91f868810827f3e5f275e09601b127e802e9105a9a7adfad4a093b49e940f2b89b33430f12725cfdd669ac37c8fb34a0e"], 0x14}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) 2.897817606s ago: executing program 2 (id=3022): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) 2.686698259s ago: executing program 2 (id=3024): r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x8, 0x7a}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000180)={0x0, 0x2, 0xfd3, 0xfffffffffffff7c8, 0x4, 0x6}) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x43}, 0x94) 2.371086178s ago: executing program 2 (id=3027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b10000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x53}}, 0x4000002) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x144, 0x24, 0xf20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe}, {0xffe0, 0xffff}}, [@TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1a, 0xef, 0x685, 0xffffff65, 0x56588c18409f58cb, 0x6, 0x128, 0x2}}, {0x8, 0x2, [0x8, 0x98b]}}, {{0x1c, 0x1, {0x8, 0x9, 0x8, 0x8fa, 0x2, 0x1, 0x7, 0x4}}, {0xc, 0x2, [0x2, 0x3, 0x7, 0xfff0]}}, {{0x1c, 0x1, {0x40, 0x0, 0x8, 0x100, 0x0, 0x3, 0x401, 0x4}}, {0xc, 0x2, [0x1, 0x0, 0xcf8a, 0x400]}}, {{0x1c, 0x1, {0x81, 0x2, 0x1ff, 0x100, 0x4, 0x6, 0x9, 0x8}}, {0x14, 0x2, [0x1, 0x4, 0x7, 0x52, 0x2, 0x7, 0xe, 0xd540]}}, {{0x1c, 0x1, {0xa, 0x40, 0x1, 0x3, 0x1, 0x6, 0x10001, 0x1}}, {0x6, 0x2, [0x6b]}}, {{0x1c, 0x1, {0x7, 0x7, 0x8c, 0xc, 0x1, 0x9, 0x80000000, 0x8}}, {0x14, 0x2, [0x8, 0x0, 0xfffa, 0x99, 0x8, 0xfff6, 0x1ff, 0x9]}}, {{0x1c, 0x1, {0x3, 0x9, 0x85d4, 0x3, 0x0, 0x3db, 0x8, 0x2}}, {0x8, 0x2, [0x69, 0x2]}}]}]}, 0x144}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.345104818s ago: executing program 3 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044894}, 0x0) socket$inet6(0xa, 0x3, 0x84) socket$inet(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) 2.217720025s ago: executing program 0 (id=3029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000008f40000000000000000e6ff851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000c7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_pauseparam={0x13, 0xffff3835, 0x80000000, 0x2}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) 2.106837892s ago: executing program 0 (id=3030): bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0x40000b}, 0x50) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000040)=0x5f5e0f6, 0x4) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c28bd7000fedbdf8eb4000000", @ANYRES32=r2, @ANYBLOB="0008000000620000300012800b00010065727370616e0000200002800400120006000f00f321000006000e00000000000500130001"], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="200000004a0001251249a5f10000000000000000000a00806e09000980040009"], 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x800) 2.092203969s ago: executing program 2 (id=3031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x10001}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0xc2af}, 0x100, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000003c0)="e7a54c37d015b26ae2d22e0a0741ac89491acf585fecd6a519d6bf32b524a881036cc811e29e2dce24318bff07745a612ee683bc52d07f29833eb8aec7a4ff6c43f2bcdc960c074dbd9a6261977ac5a9e8c8e8e15043106432fee5bac733c99a8944684c0a34ec767a9a330420e3cb874f80fd15c6ecd03479de65ff29061cca05f9b3a0095156d5c3c5ef3166c544101cb3979aa3f829e65c06517d30b506440c6de5c1631e712f0d8129907f13128b7db136fd7c312e29e5699966d2d624ae1c4778ce6cbe423c8e2db79671b6c96454e7bd7b", 0xd4, 0x0, &(0x7f00000004c0)={0x2, 0x57, {0x1, 0xc, 0x32, "fd072a2074d4188a939762ad877a53724beabca94ea078376d7336bbe19d5e1601b3d0661e22e8de7a2bdb18c507c231cb1a", 0x18, "122f4f9c57d083fdd3be119f97388e714a3eec38b11b1830"}, 0xe9, "bee459a3c2d6f7d8d07dd3dfab48ac202fc23ac068067609687eb3df02e9e6b1591f876c0270a3dc58390da814349c06d4ef1cbb19ff0ed178c89967e3438bb1ba6f6d337acf9f4380f01cdf212dd4241fd27cf9da510017ab6c97397be631be3445947af5d8cb339b47bb3d036664aa20096cbff5fda8040413606942e0855eeaed7433ca7dc3b366422f5194e189bc7d93550edd2c486612e246fcac863c8a80e30f47652e4f5e0b025791790cd0c088de13b01bb7f5dba962aeb739bb4140ca132c8b46c1feec6583712b107d803310f852657072d3513469b0e2884d7d6ac364f078127baf8272"}, 0x14c}) sendmsg$key(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c90000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) unshare(0x2a020400) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="85e79a00", @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000140)) close(0x3) socket(0x26, 0x1, 0x800) 1.988192888s ago: executing program 3 (id=3033): socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c0002000100000015000000060003000100000014000c8008000280"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r3, r4, 0x0, 0xff7fffff000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) close(0x4) 1.825932494s ago: executing program 0 (id=3034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc2e4fb7c81b5dc3}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x6d, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x884c}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x8906}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x800}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x8914}, @NFTA_CT_EXPECT_L4PROTO={0x0, 0x2, 0x11}, @NFTA_CT_EXPECT_DPORT={0x0, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0xf9}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x22eb}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x88be}]}}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x6d, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x884c}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x8906}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x800}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x8914}, @NFTA_CT_EXPECT_L4PROTO={0x0, 0x2, 0x11}, @NFTA_CT_EXPECT_DPORT={0x0, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0xf9}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x22eb}, @NFTA_CT_EXPECT_L3PROTO={0x0, 0x1, 0x1, 0x0, 0x88be}]}}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="fc00080007000000000016000000456f002000030000401190780c010102ac1414124e244e20000c9078e10e0001"], 0x2e) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x8, 0x2, 0x0, 0x0, 0x33}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1=0x4d4, {0xfffffffffffffffc, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffb}, {0x9, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.799291031s ago: executing program 3 (id=3035): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x23, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8d8c}, @exit, @generic={0x2, 0x3, 0xc, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x3, 0x1, 0xc, 0xb, 0xa, 0x100, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1a, &(0x7f0000000300)=""/26, 0x41000, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x9, 0x4, 0x8001}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x1, 0x1, 0x1], &(0x7f00000004c0)=[{0x5, 0x3, 0x6, 0x7}, {0x1, 0x1, 0x8, 0x2}, {0x0, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xa, 0x9}, {0x4, 0x2, 0xe, 0x2}, {0x2, 0x3, 0xf, 0x1}], 0x10, 0x785ef811}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%-5lx \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000006c0)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r2, 0x40, 0x5, 0x2aeae9d9}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000700)={0x1, &(0x7f00000000c0)=[{0x4, 0xe4, 0x5, 0x1000}]}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r2, &(0x7f0000000700), &(0x7f0000000740)=""/239, 0x4}, 0x20) 1.715365864s ago: executing program 3 (id=3036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r1, 0x528, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x8, 0x1}, {0x8, 0x6}, {0x6, 0x7}, {0x57, 0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x4}, {0x8, 0x7}, {0x6, 0x5}, {0x3, 0x2}, {0x64, 0x5}, {0x8, 0x3}, {0x81, 0x4}, {0x4, 0x5}, {0x2, 0x3}], "0c7dc9e455388c6c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x8, 0x2}, {0x9, 0x4}, {0x9, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x9, 0x3}, {0x1}, {0x0, 0x1}, {0x7, 0x3}, {0xf0, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0xff, 0x4}, {0x7, 0x2}, {0x2, 0x4}, {0xe, 0x1}, {0x1, 0x2}, {0xa, 0x7}, {0x11, 0x2}, {0x81, 0x3}, {0x9, 0x3}], "5d4b92ec88320609"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xb, 0x5}, {0x2}, {0x81, 0x6}, {0x4}, {0x6, 0x7}, {0x8, 0x7}, {0x8, 0x3}, {0x8, 0x5}, {0x79, 0x4}, {0x6}, {0x1, 0x7}, {0x90, 0x4}, {0xfb}, {0x4, 0x3}, {0xb8, 0x3}, {0x3, 0x2}, {0x9}, {0xd, 0x7}, {}, {0x5, 0x4}, {0x6, 0x1}], "cd8feb4bf6060dfc"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "df87865fb7660050"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{}, {0x6, 0x3}, {}, {0x3, 0x1}, {0x3c, 0x1}, {0x5, 0x6}, {0x2c, 0x2}], "6d3a1cdc9c937d1d"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040809}, 0x20000008) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbcbd}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x32b76f1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x78}}, 0x4000000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e78c3fb59f8c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000b00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x5c4, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x4d8, 0x111, 0x0, 0x1, {0x4d4, 0x5, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x37}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x182}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xef}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x51}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x69}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0xb8, 0x111, 0x0, 0x1, {0xb4, 0x5, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x44085}, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0], 0x0, 0xb8, &(0x7f0000000c40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xd4, 0x13, 0x300, 0x70bd2b, 0x25dfdbfc, {0x28, 0xff, 0x7, 0x6, {0x4e23, 0x4e20, [0x9347, 0x9, 0xec, 0x1], [0x7, 0xf, 0x2, 0x9], r3, [0x5, 0x2]}, 0x40, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0x86, 0x1, "1d3bfbe5158fe2ab9c5e811096c246036b2e2d5c38d3ae9a1d6ce1f027e7c9e97368d04f1d77d72391cd51f884c2c27c584ba45b0552719c74774e48fe0a3ab0d742f7a701bf0f9be68fbf665e8920905b0016b16e9b95f363cb16daed6b8aed28e1f87828db0fb7f7ee6bb4f9259e21c55b0996ca8bc1f6d587b285e2058c38a2f9"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20020000}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}}, 0x4000090) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000001300)={0x0, 0x9}, &(0x7f0000001340)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ecb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4009011}, 0x4000000) r10 = socket(0x23, 0x800, 0xf) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f00000014c0)={0x41, 0x2, 0x3}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000001500)=0xffffffffffffffff, 0x4) pwritev(r9, &(0x7f0000001700)=[{&(0x7f0000001540)="aa71844a9e41c26f80bfa1c193d0d1d36cc037b0978972f0c487d9dfddbe4589d8d842a03b6c0c8bf0926bb8988a531ce16694e7a22348a66be6ffa46c64288c8ffbdbdb3d9bc8fa041f49c4ddf1f91c616f299276fb7ff3fe1d68f8829f614c91956d7bb3fc87ffe992c32a40efe404108ac75bda2368b7ca24bf7d25a0b0b06017bfd919c3f50cf1023c924db187e63c0b8587dc88ca18e59dd4bd1d0f50590bca1023cc5ade6c86c9a40d275297f46edfa620b27381d9cda09b1e618ae0d2d876a3fee5ae1e6c49da7f122ad108bc8b1f99f61d345623eecc69641a", 0xdd}, {&(0x7f0000001640)="a4606ecfce248864f47e4f7b38b90581031b941303d1c3fe0f08d2b9c3c0da2e7b8453a2b738aef3b85578eb72dc84c9922f7f7c8e4495d540cb116f47395cc735d6bbb0283f187bbe6118ba0c7a83bf72913ae0b4db4b5133d76cc45884027aa667d49ef0ca5a9689a0464bf129493e0742d091dcb646ffe941d0130979bbc0a92ff6cedc41583f7797b75835cb8f919a4f894a48ccd576c076a63201a404471d8c6fa0f065ef6d4d894a304fbdc2aa42f7fe825a971855e7da453064", 0xbd}], 0x2, 0xc5a5, 0x15) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r12, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b80)={&(0x7f0000001a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x3, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x2, 0x7}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @enum64={0xa, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x8, 0x0, 0xffff}, {0xb, 0x3}, {0xc, 0x40, 0x3d}, {0x7, 0x4, 0x4}, {0x1, 0x3145, 0x6}, {0x1, 0x9, 0x8}]}, @struct={0x7, 0x9, 0x0, 0x4, 0x1, 0x2, [{0xf, 0x5, 0xfff}, {0x6, 0x4, 0x6}, {0x9, 0x5, 0x1}, {0x1, 0x5, 0x3}, {0x6, 0x2, 0x2b}, {0xc, 0x5, 0x15}, {0x5, 0x4, 0xb4}, {0x10, 0x4, 0x5615}, {0xb, 0x4, 0x7}]}, @const={0xc, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000001b80)=""/4096, 0x10f, 0x1000, 0x0, 0x80, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x18, 0x10, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001980)='GPL\x00', 0x7, 0x5e, &(0x7f00000019c0)=""/94, 0x40f00, 0x12, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f0000002bc0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002c00)={0x5, 0x9, 0x80000001, 0xfd4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002f00)=[{0x0, 0x4, 0x5, 0x3}]}, 0x94) 1.466157667s ago: executing program 3 (id=3037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="48000280"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FLAGS={0x8, 0x8, 0xffffffff}, @TCA_BPF_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f0000000600)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x20, 0x0, 0x0, 0x41100, 0x28, '\x00', r3, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) 1.452447855s ago: executing program 1 (id=2911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7ffffd, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0xffff}}}}}}, 0x0) 1.350059945s ago: executing program 4 (id=3038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x400) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES64=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYBLOB="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", @ANYRES64=r0, @ANYRES32=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r4, 0x0, 0x0, 0xbf30ccbe67c3e0fc, &(0x7f00000000c0)=@isdn={0x22, 0xff, 0x4, 0x2, 0xf}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 1.289956092s ago: executing program 1 (id=3039): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x76) close(0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x48, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x38, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r1) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/166, 0xa6}, {&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001980)=""/4097, 0x1001}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f00000018c0)=""/129, 0x81}], 0x8}}], 0x1, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.156816101s ago: executing program 1 (id=3041): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac0", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006c000100279d7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fc0000339c280000140045"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) vmsplice(r4, &(0x7f0000002440)=[{&(0x7f0000000180)="22eaec9c0298085755c62ef55a4d8c3b21f3c0e5640b105782c5be75a4945046040d01fb7ca5bb9dc5d023714508a474b73d36", 0x33}, {&(0x7f0000000240)="17e53f118f977405be884b5cda1d59ee66e2b25b6a3a75a8e11e6dd17f64811a453dacd552ecbf50c589a8039dd79dbbe8d61f5d550ad2597605b40f6351bae9285d8f7f0899ccf594f5de849ea21026e8ca6a0526517018ab45d7d415eb1d3ee0f68ae7362337b834f325903ce40e2b3758503e4a32", 0x76}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="8871919d983efea2434d056ae0155c50707169a7acda5122171722c53ec0186f281fec1a73cdc06644bb99e4a950ddd36b3a1972e50fa3a80771a0e87272812c528538c2d13a1ac5fda60d5f2373f7fda98b55926822b53727c9a1c880443d9769bac82edd097029d790d6a72c2764fb53b4594402c0aa11ed2e474253", 0x7d}, {&(0x7f0000002380)="3f33e9185f51625d7fa2c364fb11de43e47e4244f22c3ccb1a76b4abdc789ee905538ce8ea923de093a87503acc5dd65c0b2bd90779e812bfc8aa0a8d49409bb21d093f75fe819a84cc6efb0f91f6bb48ccb6cb6", 0x54}, {&(0x7f0000002400)="17a7e78f5b19761e7f308153478aeb79e39e74a4a94fe98c65", 0x19}], 0x6, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x2c, 0x2c, 0x400, 0x30b929, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x5, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000024c0)=ANY=[@ANYBLOB="08000000000000000a004e220000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000080000000a004e2200000006ff020000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000000fc00000000000000000000000000000095000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000008fe80000000000000000000000000001d08000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000002fc01000000000000000000000000000100100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e226f306812fc01000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000cb77fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000442fc0000000000000000000000000000019a050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2104000000fc0100000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a4025b3c7ef2deed112723c36c047d5edb0d6bf8c257f43f4678a003dfe2ece95e0923d8441ef300"], 0x490) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 1.144827807s ago: executing program 0 (id=3042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044894}, 0x0) socket$inet6(0xa, 0x3, 0x84) socket$inet(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) 1.065550222s ago: executing program 4 (id=3043): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000504000000020000000000001202000000020000000000000e030000000000000000002e"], 0x0, 0x54}, 0x28) (async) sendfile(r1, r0, 0x0, 0xf03a0005) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x8001}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2, 0xffffffffffffffff}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x80800) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r6) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000480)={0x20, r7, 0x1, 0x8, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040880}, 0x4048010) (async) sendmmsg$alg(r5, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, 0x0, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)="2915cc", 0x3}, {&(0x7f0000000380)="d935b92a56954049e7949559e0f014bc1b524a709e3b2ee336ec3cca84654a578a0624e2827f5b7fc90121939452f09ad6b58e398e6238d58b53f95d640297f685eee1250360ae8300ed3a171583f587ab758655012afff1aec55d6272aa8f1a3417240396e93aa9d8a265e79a391721ef278bdf4211c6af6e55fe6965ad0363e85863abc88c0a654f1fa4c8766b020b514b60ce9ff3fe1521072d02b3bd773d0ddafc4abd5ef9ec2303097442601e19f4f3eeca9af6d366735d615c14", 0xbd}, {&(0x7f0000000440)="80502cc9462af8685a044e2d703e06595d0920a70d92dd5b25c1cefff60f9f6d706fc431948f704557097c6c1282396854a658cfb737b1ba6e067369eaea67b824d60e5ead0032ee32a010789a965122a15ffbd8a441ac7f1b6b7eb1897d639642854a5e0e30aafc93a3b6ab7a9e7853c88b0b7057c6ddbba736736f42c28e639cda0444ca123c3b4b02990bffaca1328bbe36d4fe4cd8b8a285e1cf3a385f791f5666171791eda0e3c0265a6e32549ffc88ed6a7ae6e8e98a0d9fa306ad2b1e7338eaec688e3229d66d49b9377e2f59cd4fa9b8c442db1384b810921e31582e56", 0xe1}, {&(0x7f0000000540)="1dcef4bec24df2b56bcecda0c3bf", 0xe}, {&(0x7f0000000580)="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", 0xe32}], 0x5}, 0x8084) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r5) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 985.988135ms ago: executing program 3 (id=3044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xc8}}, 0x20050800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, 0x0, 0x20000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in6=@private2, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737903000000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0xc, &(0x7f0000000500)=0x6, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000003010102000000000000363f01"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r6) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="08002abd7000fedbdf25110000000600280003000000080031000400000008002b0008000000dd7f3858d39fd0058f9ea209581f8d2438de7da548bae0e11817b27d5b8146f80d88e9987a70ca1bfdb4b2cc8f3e12cc038c87225ee20fcc2f403308c630a7a52877f747775acc669eff2c5548346732d780c8cf07509b9f8345233aaecdf58c381995c0e93678e9e13e3913a768df4cd26250b8d23b3b15e0fcee49dce5a5301d3974b0ee2cc589d48a3111e080f0028b56c182c3d444f93a948f6a900abb5c3dd08d169e5ebc1969843d59319e2d534b21495e1f485d8167fc33962c00fdd1d3ef1a705da2fb"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r13, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000d9579736125545a1c1d1d70173c9103f397f3916596e5436dc3af4193723e09235680d7fbe1b0f979650d89bf589f8e4975803a44b60c551a667729a0e1fee11575914cb28933e8e72df72cab3eeac9f7e9f5072218a9062fec88bc8074fa205ecfdbc809de703c550f00437beee3c1933c2d8a174614da6d1c0366d9426a1c1874356f284b91c409ab9358d306422a47f4f98dfcab2fd96202be539b8cae15187802fa85433429b70f77785e6b368f929ba38de5c", @ANYRES16=r16, @ANYBLOB="000125bd7000ffdbdf25140000000c0007800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) 893.65103ms ago: executing program 0 (id=3045): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000600)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x20000008, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r3, 0x0, 0x2000c080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r5, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}}, 0x20080000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100"], 0x90}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 887.590988ms ago: executing program 1 (id=3046): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) r4 = socket(0x1e, 0xa, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0xffffffff}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002700)}}], 0x1, 0x400000a0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) getpeername$packet(r4, 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 758.109928ms ago: executing program 4 (id=3047): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)={0x364, 0x26, 0x1, 0x0, 0x4, "", [@nested={0xffffffffffffff55, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x330, 0x53, 0x0, 0x1, [@nested={0x118, 0xa1, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd}, @nested={0x4, 0x8}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x3a}, @generic="fc5043a0a36c5159202932748e8e035970d331a25cfd4652e385a1564becc72900cb58235836176154967f4a7f6f7cc63d64af918c4052fc5239e50509aed2deb4d9c73350c66bd3c12a9a620385ea406be654303fbb35d42162fb44017cf778067fddc1a7d830e9ebb844209f76256c1df734f92cfd5d4243b5af3416724157ee3dbb810e57ec533ed96737d9d9d9b81d498d77d4f070636a81e59c2b7879b80ec7a090349e649a3131ce3e81d4510bfa66dfcffcfb0378a5d1e8bb82c0c41f907a93c28ac2d56cbaef76bbb9e1e6f533bb12f4d021d874aed32dc19472249f", @typed={0x8, 0x97, 0x0, 0x0, @u32}, @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x17}, @nested={0x4, 0xde}]}, @generic="d8a8f50b13e191de5f49eba9fb5063180a46a5fb943291af0a8c76fbe3b7a499ca5fa16861cd261aeadf6f79ad05197e06f69d6459", @generic="945eb642165dad354411766ba3d151f55d0c3d3cc1d763ceb65581106964b5012cc0501cf61bfd7fd0ebf82fd29cc13f5c0b335a2db1738caea2be0655769ca3823c13fcd91c5ca6fe7f3f1bc49d554a44645686b5533a38bd4f83", @nested={0x182, 0xb9, 0x0, 0x1, [@generic="3e317a10dc2ca9b5e9fd43759ba64dd1177ad912ffe80617b880c1c33d60419dce1cc496de634e7ed187b97e391d9cea220ef1f2fa181915c56fbab8cf6be63dfe66f0cdbb4da2775e31fff7a950b7135f029e3f232e94b53ee97a668181b38edf50cd6009dbf02f075b7c0e0a1c0941e847921b973cefac9a71a9e6e6b65b329bd398beaacbb4f76ef26a9a1a816964155c346d9eaa4c5ae970cd9761d68c1ab4a3ece6f3eda8fac6e5aded7fdf748beb3b389e81499d462e4e3cb0f0c2dd17225095e0564c688dbcec198d15e69c409a6dfb96295cde64280291585e6d", @typed={0x8, 0x81, 0x0, 0x0, @pid}, @generic="9d7b38729520c6bdcf9ec1564000bee62170f76e48c137c294c5eee4ff2833f0bcdd4acbd55b6b3105e348c8c1af5f554acb6ca907a746fd126638c3f07c004f19837c3dd5e25a90e0453482e459e5b65fbca7a0f774616cca66ee4d54638c598251f8a4c0c4e42da9952b2f248d982759ec1341302d97", @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x6}, @generic="0216c77976a8f67cb427f0c553c2f81ce9bb023916"]}]}]}]}, 0x364}], 0x1}, 0x0) 511.569264ms ago: executing program 1 (id=3048): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0101020069c50100140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB="fb6b6553c4d66afec7804e28f38d52521cac8d05f7c4190f"], 0x3c}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000700)=ANY=[@ANYBLOB="0000000093dd78674823f21a03d88150a5e80a24f2bb822c149e7cab8c2a1abed11a2144d503346dae42c1d417d6d98ada8e34286749d9998f9862e33aca52a63d69bfd313c160806433c155b760e3b49ba51847a0be645fd1580801dae992d6d42352fa04ea2a7170ebc757c6f5db886948f1f0521aef531bd0baba9f9a4f2529f78a80cf8d56d2348f968caa05faa8b9600cb2627ecd5fc675dd7ceeebf5", @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf25060000005c00018008000100", @ANYRESOCT=0x0, @ANYBLOB="140002006e69637666300000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000100000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYRES8=r8, @ANYRESDEC=r4, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="1400020064756d6d79300000000000000000000008000300000000004400018008000100", @ANYRES32=r7, @ANYRES64=r6, @ANYRES32=r7, @ANYRESDEC=r2, @ANYRES32=r8, @ANYRESHEX], 0x174}, 0x1, 0x0, 0x0, 0x20040010}, 0xc04c084) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) close(r2) shutdown(r1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f00000004c0)) sendmsg$nl_route(r6, 0x0, 0x4804) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) 491.392657ms ago: executing program 4 (id=3049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x403, 0xfffffffa, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20044000) 214.199117ms ago: executing program 4 (id=3050): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/166, 0xa6}, {&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001980)=""/4097, 0x1001}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f00000018c0)=""/129, 0x81}], 0x8}}], 0x1, 0x40010122, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 0s ago: executing program 4 (id=3051): socketpair(0x2c, 0x6, 0x1, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x881) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) sendto$inet(r3, &(0x7f0000000bc0)="370a9300f5ad0ac4373248a0340d6a58230a692c5b93ccc41f83927bb0980616fb2d88c8f126a2377cbce421ee5df8133ad4adea54dbeb5783c043f1a97e37e0f3085320d7c8094bae2991271fd4ca6e79a64ee2e6f785a3f27bbfae3f41d933447c9718aa7b87e66f23c85cfe80fe2ad69505b95ceff62279b808ffee5ef4d34f8eeed5b081ec9b8329efd48fc96df57c4b84b18d5824831e23b99fe9394f66818cc5ef16ea", 0xa6, 0x4000854, &(0x7f0000000c80)={0x2, 0x4e21, @multicast2}, 0x10) unshare(0x22020600) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff8, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf2f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x5084}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='syzkaller\x00', 0x800004, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000740)=""/248, 0xf8}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 9][T11228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 242.100727][T11236] netlink: 'syz.1.1385': attribute type 12 has an invalid length. [ 242.205479][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 242.303087][T11253] xt_HMARK: spi-set and port-set can't be combined [ 242.769514][T11276] bond0: entered promiscuous mode [ 242.784772][T11276] bond_slave_0: entered promiscuous mode [ 242.810498][T11276] bond_slave_1: entered promiscuous mode [ 242.837187][T11276] batadv0: entered promiscuous mode [ 242.852920][T11276] bond0: left promiscuous mode [ 242.858954][T11276] bond_slave_0: left promiscuous mode [ 242.869490][T11276] bond_slave_1: left promiscuous mode [ 242.879438][T11276] batadv0: left promiscuous mode [ 242.904471][T11285] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1399'. [ 242.932470][T11288] gretap1: entered promiscuous mode [ 243.095984][T11295] bond2 (unregistering): Released all slaves [ 243.674580][T11329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1411'. [ 243.818682][ T5628] net_ratelimit: 6 callbacks suppressed [ 243.818698][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.862886][T11337] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 244.061852][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.374635][T11368] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 244.390495][T11368] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 244.665382][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 244.699914][T11389] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1431'. [ 245.449368][T11408] netlink: 'syz.4.1435': attribute type 361 has an invalid length. [ 245.900180][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.099720][T11416] lo speed is unknown, defaulting to 1000 [ 246.291167][T11420] openvswitch: netlink: Missing key (keys=40, expected=100) [ 246.618336][ C0] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 246.625710][ C0] bridge0: topology change detected, propagating [ 246.938638][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.109504][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.344087][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 247.374344][T11428] netlink: 'syz.1.1442': attribute type 30 has an invalid length. [ 247.437734][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 247.451933][T11434] netlink: 'syz.1.1442': attribute type 30 has an invalid length. [ 247.572808][T11428] vxlan0: entered promiscuous mode [ 247.580042][T11428] vxlan0: entered allmulticast mode [ 247.598513][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 247.626671][T11434] vxlan1: entered promiscuous mode [ 247.640482][T11434] vxlan1: entered allmulticast mode [ 247.809484][ T3323] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.830841][ T3323] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.974870][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 247.990934][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.000595][T11437] syzkaller0: entered promiscuous mode [ 248.011549][T11437] syzkaller0: entered allmulticast mode [ 248.043363][T11457] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 248.064075][T11457] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1449'. [ 248.081240][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.110644][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.224221][T11461] netlink: 'syz.0.1452': attribute type 5 has an invalid length. [ 248.251186][T11464] netlink: 'syz.1.1450': attribute type 3 has an invalid length. [ 248.279847][T11464] netlink: 'syz.1.1450': attribute type 3 has an invalid length. [ 248.301532][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1450'. [ 248.405626][T11464] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 248.901099][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1455'. [ 250.059657][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.149686][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.458685][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.098313][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.139114][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.103664][T11487] xt_socket: unknown flags 0x4 [ 253.127574][T11492] xt_hashlimit: size too large, truncated to 1048576 [ 253.189418][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.197627][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.305868][T11498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.346910][T11503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.603038][T11513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1463'. [ 253.640222][T11513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1463'. [ 253.659977][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1463'. [ 253.674601][T11516] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 253.683250][T11516] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1464'. [ 253.894887][T11528] bond5: option downdelay: invalid value (18446744073709551487) [ 253.904210][T11528] bond5: option downdelay: allowed values 0 - 2147483647 [ 253.920923][T11528] bond5 (unregistering): Released all slaves [ 253.999090][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 254.040749][T11532] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 254.070816][T11541] netlink: 'syz.2.1471': attribute type 12 has an invalid length. [ 254.100660][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1471'. [ 254.133245][T11538] lo speed is unknown, defaulting to 1000 [ 254.218744][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.559034][T11556] lo speed is unknown, defaulting to 1000 [ 254.573494][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1478'. [ 254.892441][T11583] x_tables: unsorted underflow at hook 3 [ 254.934051][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1482'. [ 255.094496][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807986ac00: rx timeout, send abort [ 255.102868][T11593] netlink: 810 bytes leftover after parsing attributes in process `syz.4.1484'. [ 255.108175][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807986ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 255.258219][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.579441][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.848469][T11619] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1490'. [ 256.231820][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.298982][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.570386][T11654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.813024][T11645] raw_sendmsg: syz.1.1494 forgot to set AF_INET. Fix it! [ 256.829672][T11665] xt_NFQUEUE: number of total queues is 0 [ 256.860278][T11667] lo speed is unknown, defaulting to 1000 [ 256.902288][T11669] syzkaller0: left promiscuous mode [ 256.908762][T11669] syzkaller0: left allmulticast mode [ 257.338863][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.772612][T11707] xt_hashlimit: size too large, truncated to 1048576 [ 257.966102][T11708] xt_CT: No such helper "netbios-ns" [ 258.066619][T11720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.228185][T11725] sctp: [Deprecated]: syz.3.1518 (pid 11725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.228185][T11725] Use struct sctp_sack_info instead [ 258.332105][T11730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.381008][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.384089][T11730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.432378][T11730] bond0 (unregistering): Released all slaves [ 258.903806][T11756] lo speed is unknown, defaulting to 1000 [ 258.987651][T11736] bridge5: entered promiscuous mode [ 258.992938][T11736] bridge5: entered allmulticast mode [ 259.135940][T11773] team0: Port device syz_tun removed [ 259.159803][T11773] bond0: (slave 07ÿ): Releasing backup interface [ 259.238703][T11773] bond0: (slave bond_slave_1): Releasing backup interface [ 259.258122][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.306227][T11773] team0: Port device team_slave_1 removed [ 259.329968][T11773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.348040][T11773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.363859][T11773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.393299][T11773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.414322][T11773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.438835][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.443121][ T187] lo speed is unknown, defaulting to 1000 [ 259.455020][T11781] __nla_validate_parse: 7 callbacks suppressed [ 259.455061][T11781] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1529'. [ 259.469642][T11777] tipc: Invalid UDP bearer configuration [ 259.470314][T11777] tipc: Enabling of bearer rejected, failed to enable media [ 259.567663][T11774] team0: Device xfrm0 is of different type [ 259.676887][T11788] syzkaller1: entered promiscuous mode [ 259.682485][T11788] syzkaller1: entered allmulticast mode [ 259.693688][T11781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.714682][T11801] veth0_to_team: entered allmulticast mode [ 259.780693][T11773] tipc: Enabling of bearer rejected, failed to enable media [ 259.915354][T11805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1538'. [ 260.000931][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 260.017644][T11812] IPv6: NLM_F_REPLACE set, but no existing node found! [ 260.281358][T11834] net_ratelimit: 1 callbacks suppressed [ 260.281376][T11834] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 260.312435][T11834] netlink: 'syz.1.1545': attribute type 10 has an invalid length. [ 260.444670][T11840] tipc: Enabled bearer , priority 0 [ 260.456947][T11840] syzkaller0: entered promiscuous mode [ 260.468639][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.482733][T11840] syzkaller0: entered allmulticast mode [ 260.501674][T11840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1546'. [ 260.512498][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 260.521868][T11840] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.552819][T11842] batman_adv: batadv0: Adding interface: macvtap1 [ 260.575736][T11842] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.610361][T11842] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 260.810355][T11837] tipc: Resetting bearer [ 260.856037][T11837] tipc: Disabling bearer [ 261.101673][T11864] syzkaller0: entered promiscuous mode [ 261.117867][T11864] syzkaller0: entered allmulticast mode [ 261.324162][T11878] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 261.340757][T11876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1558'. [ 261.392783][T11887] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1558'. [ 261.502224][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.662191][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 261.680264][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 261.751548][T11904] sctp: [Deprecated]: syz.2.1569 (pid 11904) Use of int in maxseg socket option. [ 261.751548][T11904] Use struct sctp_assoc_value instead [ 261.815416][T11909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.826460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.930285][T11909] netlink: 'syz.0.1570': attribute type 2 has an invalid length. [ 261.951301][T11909] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1570'. [ 262.299111][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.538196][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.607495][T11939] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.658077][ T62] batman_adv: batadv2: IGMP Querier appeared [ 262.665179][ T62] batman_adv: batadv2: MLD Querier appeared [ 262.780468][T11946] netlink: 'syz.1.1579': attribute type 11 has an invalid length. [ 262.838212][T11949] x_tables: duplicate underflow at hook 1 [ 263.377522][T11993] 0: reclassify loop, rule prio 0, protocol 800 [ 263.578989][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.708697][T12009] tipc: Enabling of bearer rejected, failed to enable media [ 264.120499][T12033] lo speed is unknown, defaulting to 1000 [ 264.538128][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.679386][T12057] __nla_validate_parse: 7 callbacks suppressed [ 264.679404][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1610'. [ 265.034587][T12075] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1615'. [ 265.059594][T12075] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1615'. [ 265.108096][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 265.160595][T12085] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 265.217792][T12089] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 265.338345][ T5744] net_ratelimit: 1 callbacks suppressed [ 265.338361][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.429545][T12084] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 265.487246][ T5718] lo speed is unknown, defaulting to 1000 [ 265.496543][ T5718] syz2: Port: 1 Link DOWN [ 265.503233][ T3323] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.524099][ T3323] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.550860][ T3323] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.569734][ T3323] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.585266][ T3323] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.596021][ T3323] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.605418][ T3323] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.631648][ T3323] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.660681][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.706655][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1622'. [ 265.837139][T12114] xt_hashlimit: size too large, truncated to 1048576 [ 265.924588][T12122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.942430][T12124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1628'. [ 265.965699][T12124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1628'. [ 266.000210][T12124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1628'. [ 266.038285][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 266.070514][T12124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1628'. [ 266.640297][T12156] syzkaller0: entered promiscuous mode [ 266.646251][T12156] syzkaller0: entered allmulticast mode [ 266.706715][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.787787][T12162] syzkaller0: entered promiscuous mode [ 266.818074][T12162] syzkaller0: entered allmulticast mode [ 266.968359][T12172] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 266.981010][T12172] bond4 (unregistering): Released all slaves [ 267.160819][T12183] SET target dimension over the limit! [ 267.280021][T12193] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 267.740703][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.887232][T12227] netlink: 'syz.3.1657': attribute type 11 has an invalid length. [ 268.057182][T12241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.104416][T12241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.126315][T12241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.154516][T12241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.165379][T12241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.231327][T12258] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 268.289386][T12241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.423114][T12266] mac80211_hwsim hwsim2 »»»»»»z1: renamed from wlan0 [ 268.488335][ T5641] block nbd2: Receive control failed (result -32) [ 269.474378][T12338] netlink: 'syz.4.1690': attribute type 31 has an invalid length. [ 269.789721][T12351] __nla_validate_parse: 18 callbacks suppressed [ 269.789738][T12351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1694'. [ 269.818800][T12359] xt_NFQUEUE: number of total queues is 0 [ 269.875024][T12351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1694'. [ 270.000493][T12365] xt_hashlimit: size too large, truncated to 1048576 [ 270.028390][T12365] xt_hashlimit: max too large, truncated to 1048576 [ 270.119069][T12369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.347254][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1703'. [ 270.512068][T12388] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 270.556384][T12388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1706'. [ 270.861727][ T5726] net_ratelimit: 7 callbacks suppressed [ 270.861742][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.893919][T12403] lo speed is unknown, defaulting to 1000 [ 271.424291][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.477243][T12427] bond4: entered allmulticast mode [ 271.593375][T12421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.604863][T12421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.898410][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.951545][T12421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.037518][T12421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.376690][T12465] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1729'. [ 272.395626][T12421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.435514][T12421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.512437][T12467] bridge0: port 2(veth1_to_bridge) entered blocking state [ 272.544809][T12467] bridge0: port 2(veth1_to_bridge) entered disabled state [ 272.567743][T12467] veth1_to_bridge: entered allmulticast mode [ 272.600556][T12467] veth1_to_bridge: entered promiscuous mode [ 272.640738][T12470] openvswitch: netlink: IPv4 tunnel dst address is zero [ 272.696602][T12470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1731'. [ 272.794851][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 272.874852][T12421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.935037][T12421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.946893][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.054519][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'. [ 273.116044][T12487] bridge3: port 1(vlan4) entered blocking state [ 273.122783][T12487] bridge3: port 1(vlan4) entered disabled state [ 273.129447][T12487] vlan4: entered allmulticast mode [ 273.134760][T12487] bridge3: entered allmulticast mode [ 273.149079][T12487] vlan4: left allmulticast mode [ 273.154575][T12487] bridge3: left allmulticast mode [ 273.228894][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.242842][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.252077][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.260592][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.328803][ T139] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.346588][ T139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.364131][T12495] ieee802154 phy1 wpan1: encryption failed: -90 [ 273.369218][ T139] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.394894][ T139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.517835][T12495] bond10 (unregistering): Released all slaves [ 273.788854][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 273.978274][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.207800][T12529] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 274.224639][T12525] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 274.244923][T12528] lo speed is unknown, defaulting to 1000 [ 274.320726][T12525] bond10: entered promiscuous mode [ 274.333310][T12525] 8021q: adding VLAN 0 to HW filter on device bond10 [ 274.386174][T12529] bond10: (slave bridge5): making interface the new active one [ 274.395021][T12529] bridge5: entered promiscuous mode [ 274.415745][T12529] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 274.458313][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.474396][T12535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.590856][T12538] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.601370][T12538] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.805791][T12538] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.861353][T12538] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.955817][T12538] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.970198][T12551] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1754'. [ 274.977506][T12552] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 274.990785][T12551] netlink: 5960 bytes leftover after parsing attributes in process `syz.3.1754'. [ 275.000113][T12552] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1755'. [ 275.000717][T12538] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.018231][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.034524][T12551] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 275.150437][T12538] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.164522][T12538] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.309768][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 275.586432][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1756'. [ 275.999001][T12596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1763'. [ 276.010315][T12596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1763'. [ 276.019508][T12596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1763'. [ 276.028734][T12596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1763'. [ 276.037817][T12596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1763'. [ 276.061059][ T5718] net_ratelimit: 1 callbacks suppressed [ 276.061074][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.091265][T12595] syzkaller0: entered promiscuous mode [ 276.107208][T12595] syzkaller0: entered allmulticast mode [ 276.143274][T12595] netlink: 'syz.3.1764': attribute type 13 has an invalid length. [ 276.314646][T12608] geneve0: entered promiscuous mode [ 276.358778][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.588322][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.768431][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.992385][T12631] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 277.041872][T12631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.081527][T12631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.094711][T12631] bond4: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 277.098635][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.112669][T12631] bond4: (slave ip6gre0): Error -95 calling set_mac_address [ 277.182490][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.338503][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.378869][T12655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.387356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.398221][T12655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.719445][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.741329][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.868302][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.895587][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.930586][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.954128][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.016137][T12694] sctp: [Deprecated]: syz.1.1790 (pid 12694) Use of int in maxseg socket option. [ 278.016137][T12694] Use struct sctp_assoc_value instead [ 278.031077][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.066834][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.084291][T12700] C: renamed from veth1_to_team [ 278.997597][T12760] ip6tnl1: entered allmulticast mode [ 279.031989][ T139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.054626][ T139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.062796][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.263728][T12772] syz_tun: entered promiscuous mode [ 279.270281][T12772] macsec0: entered allmulticast mode [ 279.275729][T12772] syz_tun: entered allmulticast mode [ 279.283232][T12772] batman_adv: batadv0: Adding interface: macsec0 [ 279.291280][T12772] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.317679][T12772] batman_adv: batadv0: Interface activated: macsec0 [ 279.929411][T12816] bond11: Unable to set down delay as MII monitoring is disabled [ 279.945124][T12816] bond11 (unregistering): Released all slaves [ 279.979470][ T5744] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.984885][T12817] __nla_validate_parse: 242 callbacks suppressed [ 279.984901][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 280.002942][T12817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1823'. [ 280.013523][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 280.022855][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1826'. [ 280.023135][T12817] netlink: 'syz.2.1823': attribute type 5 has an invalid length. [ 280.036422][T12821] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1826'. [ 280.061151][ T5744] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 280.079634][T12814] netlink: 'syz.2.1823': attribute type 23 has an invalid length. [ 280.340892][ T30] audit: type=1800 audit(1785946486.742:5): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1830" name="memory.events" dev="tmpfs" ino=1910 res=0 errno=0 [ 280.374161][T12838] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1828'. [ 280.398789][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1828'. [ 280.439898][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 280.523257][T12855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1832'. [ 280.973855][T12875] netlink: 'syz.2.1839': attribute type 29 has an invalid length. [ 281.033263][T12848] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 281.203795][T12888] net_ratelimit: 26 callbacks suppressed [ 281.203813][T12888] openvswitch: netlink: IPv6 tunnel dst address is zero [ 281.222610][T12885] syzkaller0: entered promiscuous mode [ 281.232702][T12885] syzkaller0: entered allmulticast mode [ 281.282096][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.320866][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 282.027374][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.051544][T12923] lo speed is unknown, defaulting to 1000 [ 282.055863][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.110073][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.172323][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.185078][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.298545][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.394288][T12922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.538522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.829018][T12968] netlink: 'syz.1.1864': attribute type 3 has an invalid length. [ 282.835230][T12970] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 282.991606][T12959] syzkaller0: entered promiscuous mode [ 283.007371][T12959] syzkaller0: entered allmulticast mode [ 283.066317][T12970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.115742][T12973] vlan1: entered promiscuous mode [ 283.130381][T12973] bond5: entered promiscuous mode [ 283.138118][T12973] vlan1: entered allmulticast mode [ 283.143426][T12973] bond5: entered allmulticast mode [ 283.508230][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 285.382270][T12986] batman_adv: batadv0: Removing interface: macvtap1 [ 285.392593][T12986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.407387][T12994] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 285.410092][T12995] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 285.611910][T13042] xt_ipcomp: unknown flags 1D [ 285.632065][T13043] netlink: 'syz.4.1879': attribute type 8 has an invalid length. [ 285.681658][T13041] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 285.811973][T13055] __nla_validate_parse: 10 callbacks suppressed [ 285.811989][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 285.848846][T13050] bridge0: port 2(veth1_to_bridge) entered blocking state [ 285.856096][T13050] bridge0: port 2(veth1_to_bridge) entered forwarding state [ 285.916087][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 286.042932][T13050] hsr0: left promiscuous mode [ 286.061722][T13050] hsr0: left allmulticast mode [ 286.075779][T13050] hsr_slave_0: left allmulticast mode [ 286.090266][T13050] hsr_slave_1: left allmulticast mode [ 286.220005][ T187] net_ratelimit: 10 callbacks suppressed [ 286.220022][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.279616][T13082] lo speed is unknown, defaulting to 1000 [ 286.293829][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.338329][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.381930][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.465118][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.616399][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 286.637212][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'. [ 286.688361][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.862870][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.875716][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1895'. [ 286.907170][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1895'. [ 286.918869][T13112] block nbd0: NBD_DISCONNECT [ 286.923512][T13112] block nbd0: Send disconnect failed -32 [ 286.932190][T13112] block nbd0: Send disconnect failed -32 [ 286.940370][T13112] block nbd0: shutting down sockets [ 286.951062][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.997064][T13112] bridge0: entered allmulticast mode [ 287.042555][T13112] pim6reg: entered allmulticast mode [ 287.094933][T13127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1897'. [ 287.178374][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.186729][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.395447][T13141] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1902'. [ 287.616965][T13153] veth1_to_bridge: left allmulticast mode [ 287.626474][T13153] veth1_to_bridge: left promiscuous mode [ 287.635097][T13153] bridge0: port 2(veth1_to_bridge) entered disabled state [ 287.763099][T13159] netlink: 'syz.1.1907': attribute type 10 has an invalid length. [ 287.784729][T13159] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 287.822400][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'. [ 288.030495][T13167] veth0: entered promiscuous mode [ 288.047309][T13167] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 288.069407][T13167] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1911'. [ 288.104651][T13166] veth0: left promiscuous mode [ 288.251296][T13175] ip6gre1: entered promiscuous mode [ 288.256837][T13175] ip6gre1: entered allmulticast mode [ 291.428396][ C0] net_ratelimit: 345 callbacks suppressed [ 291.428415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.660266][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.813733][T13247] Cannot find set identified by id 0 to match [ 291.851975][T13248] Cannot find set identified by id 0 to match [ 292.058022][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 292.211168][T13254] pimreg: entered allmulticast mode [ 292.245414][T13267] SET target dimension over the limit! [ 292.266153][T13267] netlink: 'syz.4.1938': attribute type 10 has an invalid length. [ 292.292065][T13253] pimreg: left allmulticast mode [ 292.698959][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.180675][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.266542][T13297] lo speed is unknown, defaulting to 1000 [ 293.267468][T13300] __nla_validate_parse: 6 callbacks suppressed [ 293.267482][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 293.357216][T13300] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1946'. [ 293.531311][T13319] ip_tables: iptables: counters copy to user failed while replacing table [ 293.679089][T13309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.738503][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.843940][T13326] x_tables: duplicate underflow at hook 1 [ 294.782917][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.818109][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.218248][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.345266][T13324] IPVS: Unknown mcast interface: pim6reg0 [ 296.366585][T13331] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 296.389689][T13331] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1950'. [ 296.466695][T13338] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1954'. [ 296.502615][T13335] pim6reg: entered allmulticast mode [ 296.514328][T13335] pim6reg: left allmulticast mode [ 296.539415][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.858841][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.922347][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 296.940170][T13359] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1961'. [ 296.997481][T13361] netlink: 'syz.3.1962': attribute type 40 has an invalid length. [ 297.067115][T13366] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1963'. [ 297.076733][T13366] openvswitch: netlink: Message has 512 unknown bytes. [ 297.090639][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 297.241710][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1965'. [ 297.819062][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.905106][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.459495][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.945288][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.100158][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.015294][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.181435][T13422] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 300.253862][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1970'. [ 300.574301][T13440] lo: Caught tx_queue_len zero misconfig [ 300.651611][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 300.688433][T13447] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1979'. [ 300.708585][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 302.058196][ T5718] net_ratelimit: 2 callbacks suppressed [ 302.058215][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.098146][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.783222][T13468] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 303.832609][T13470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1985'. [ 304.005553][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 304.056440][T13474] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1988'. [ 304.066734][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 304.087823][T13481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1991'. [ 304.111327][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 304.147711][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.170780][T13481] netlink: 'syz.0.1991': attribute type 5 has an invalid length. [ 304.184202][T13481] netlink: 'syz.0.1991': attribute type 6 has an invalid length. [ 304.538283][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.184449][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.218176][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.778307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.258787][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.594837][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.652888][T13517] __nla_validate_parse: 5 callbacks suppressed [ 307.652906][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 307.721982][T13517] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 307.834216][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 307.891862][T13516] lo speed is unknown, defaulting to 1000 [ 307.989793][T13538] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2010'. [ 308.017081][T13538] 0·: renamed from hsr0 (while UP) [ 308.028586][T13538] 0·: entered allmulticast mode [ 308.033740][T13538] hsr_slave_0: entered allmulticast mode [ 308.040291][T13538] hsr_slave_1: entered allmulticast mode [ 308.048370][T13538] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 308.176255][T13551] IPv4: Oversized IP packet from 127.202.26.0 [ 308.290334][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'. [ 308.306692][T13558] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2014'. [ 308.599880][T13568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2018'. [ 308.699259][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.708267][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.344884][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.384900][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.618717][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.442102][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.569212][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2022'. [ 311.655839][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'. [ 311.805212][T13602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2026'. [ 311.823230][T13602] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2026'. [ 312.458228][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.178713][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.501018][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.658160][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.820397][T13400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.830337][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.841341][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.459551][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.541492][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.938266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.020395][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.508209][ T5744] net_ratelimit: 6 callbacks suppressed [ 317.508222][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.660349][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.698248][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.739865][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.539479][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.778192][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.818230][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.860812][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.578133][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.899764][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.658473][T13611] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2032'. [ 324.710046][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.916866][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 324.956499][T13622] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2034'. [ 325.042826][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2038'. [ 325.053723][T13636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2038'. [ 325.978446][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.986607][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.619047][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.018217][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.738196][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.894544][T13641] netlink: 'syz.1.2040': attribute type 2 has an invalid length. [ 328.079432][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.215749][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 328.253795][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2044'. [ 328.305853][T13671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.324326][T13671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.339323][T13664] veth5: entered allmulticast mode [ 328.339361][T13671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.368310][T13671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.382584][T13671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.393099][T13671] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 328.457306][T13666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.751602][T13691] netlink: 'syz.0.2052': attribute type 1 has an invalid length. [ 328.774924][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'. [ 328.784744][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2052'. [ 328.789026][T13699] FAULT_INJECTION: forcing a failure. [ 328.789026][T13699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.828066][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.4.2055 Not tainted syzkaller #0 PREEMPT(full) [ 328.828092][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.828114][T13699] Call Trace: [ 328.828122][T13699] [ 328.828130][T13699] dump_stack_lvl+0xe8/0x150 [ 328.828164][T13699] should_fail_ex+0x40c/0x560 [ 328.828193][T13699] _copy_to_user+0x31/0xb0 [ 328.828214][T13699] simple_read_from_buffer+0xe1/0x170 [ 328.828246][T13699] proc_fail_nth_read+0x1bb/0x230 [ 328.828277][T13699] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.828307][T13699] ? rw_verify_area+0x24a/0x4c0 [ 328.828328][T13699] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.828354][T13699] vfs_read+0x213/0xa80 [ 328.828377][T13699] ? __pfx___mutex_lock+0x10/0x10 [ 328.828405][T13699] ? __pfx_vfs_read+0x10/0x10 [ 328.828425][T13699] ? __fget_files+0x2a/0x420 [ 328.828462][T13699] ? __fget_files+0x3a2/0x420 [ 328.828486][T13699] ? __fget_files+0x2a/0x420 [ 328.828520][T13699] ksys_read+0x150/0x270 [ 328.828542][T13699] ? __pfx_ksys_read+0x10/0x10 [ 328.828569][T13699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.828589][T13699] do_syscall_64+0x174/0x580 [ 328.828615][T13699] ? trace_irq_disable+0x3b/0x140 [ 328.828638][T13699] ? clear_bhb_loop+0x40/0x90 [ 328.828661][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.828680][T13699] RIP: 0033:0x7fa47f35e90e [ 328.828698][T13699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 328.828715][T13699] RSP: 002b:00007fa4801d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.828735][T13699] RAX: ffffffffffffffda RBX: 00007fa4801d16c0 RCX: 00007fa47f35e90e [ 328.828749][T13699] RDX: 000000000000000f RSI: 00007fa4801d10a0 RDI: 0000000000000005 [ 328.828760][T13699] RBP: 00007fa4801d1090 R08: 0000000000000000 R09: 0000000000000000 [ 328.828772][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.828784][T13699] R13: 00007fa47f626038 R14: 00007fa47f625fa0 R15: 00007ffe6c1886a8 [ 328.828816][T13699] [ 329.103173][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.162226][T13705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.226680][T13705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.320764][T13712] syzkaller1: entered promiscuous mode [ 329.329441][T13712] syzkaller1: entered allmulticast mode [ 329.565749][T13731] tipc: Enabling of bearer rejected, failed to enable media [ 329.644679][T13733] netlink: 'syz.4.2064': attribute type 4 has an invalid length. [ 329.661303][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 329.671402][T13733] netlink: 'syz.4.2064': attribute type 4 has an invalid length. [ 329.694098][T13735] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 329.852031][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'. [ 329.918616][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.935557][T13739] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 329.936491][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'. [ 330.003102][T13750] bond6: option ad_actor_sys_prio: invalid value (0) [ 330.010645][T13750] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 330.022168][T13750] bond6 (unregistering): Released all slaves [ 330.333568][T13766] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2072'. [ 330.360763][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 330.442071][T13766] lo speed is unknown, defaulting to 1000 [ 330.519660][T13776] nbd: must specify at least one socket [ 330.839514][T13793] FAULT_INJECTION: forcing a failure. [ 330.839514][T13793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.859630][T13793] CPU: 0 UID: 0 PID: 13793 Comm: syz.4.2079 Not tainted syzkaller #0 PREEMPT(full) [ 330.859655][T13793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.859667][T13793] Call Trace: [ 330.859673][T13793] [ 330.859680][T13793] dump_stack_lvl+0xe8/0x150 [ 330.859713][T13793] should_fail_ex+0x40c/0x560 [ 330.859752][T13793] _copy_from_iter+0x1d3/0x1660 [ 330.859777][T13793] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 330.859802][T13793] ? rcu_is_watching+0x15/0xb0 [ 330.859820][T13793] ? trace_kmem_cache_alloc+0x29/0xe0 [ 330.859845][T13793] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 330.859867][T13793] ? __pfx__copy_from_iter+0x10/0x10 [ 330.859890][T13793] ? __alloc_skb+0x276/0x7a0 [ 330.859909][T13793] ? __alloc_skb+0x276/0x7a0 [ 330.859934][T13793] ? netlink_sendmsg+0x650/0xb40 [ 330.859957][T13793] ? skb_put+0x112/0x210 [ 330.859980][T13793] netlink_sendmsg+0x6c0/0xb40 [ 330.860011][T13793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.860037][T13793] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.860066][T13793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.860089][T13793] sock_sendmsg_nosec+0x13a/0x180 [ 330.860120][T13793] ____sys_sendmsg+0x54e/0x850 [ 330.860147][T13793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.860180][T13793] ? import_iovec+0x73/0xa0 [ 330.860201][T13793] ___sys_sendmsg+0x2a5/0x360 [ 330.860220][T13793] ? __lock_acquire+0x683/0x2cf0 [ 330.860248][T13793] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.860302][T13793] ? __fget_files+0x2a/0x420 [ 330.860326][T13793] ? __fget_files+0x3a2/0x420 [ 330.860360][T13793] __x64_sys_sendmsg+0x1b1/0x290 [ 330.860386][T13793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.860426][T13793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.860447][T13793] do_syscall_64+0x174/0x580 [ 330.860471][T13793] ? trace_irq_disable+0x3b/0x140 [ 330.860496][T13793] ? clear_bhb_loop+0x40/0x90 [ 330.860518][T13793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.860535][T13793] RIP: 0033:0x7fa47f39e0d9 [ 330.860552][T13793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.860567][T13793] RSP: 002b:00007fa4801d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.860586][T13793] RAX: ffffffffffffffda RBX: 00007fa47f625fa0 RCX: 00007fa47f39e0d9 [ 330.860599][T13793] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 330.860611][T13793] RBP: 00007fa4801d1090 R08: 0000000000000000 R09: 0000000000000000 [ 330.860622][T13793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.860633][T13793] R13: 00007fa47f626038 R14: 00007fa47f625fa0 R15: 00007ffe6c1886a8 [ 330.860662][T13793] [ 331.147699][T13799] netlink: 'syz.1.2080': attribute type 7 has an invalid length. [ 331.206669][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2081'. [ 331.421635][T13810] netlink: 'syz.1.2085': attribute type 10 has an invalid length. [ 331.428945][T13812] Bluetooth: MGMT ver 1.23 [ 331.749270][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 331.862956][T13836] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2094'. [ 331.886727][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2094'. [ 331.910906][T13838] unsupported nla_type 97 [ 332.153351][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 332.210518][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 332.261497][T13812] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 332.378345][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.483163][T13864] veth0_macvtap: left promiscuous mode [ 332.675436][T13876] sctp: [Deprecated]: syz.1.2107 (pid 13876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.675436][T13876] Use struct sctp_sack_info instead [ 332.764859][T13876] lo speed is unknown, defaulting to 1000 [ 332.922744][T13885] netlink: 'syz.4.2110': attribute type 33 has an invalid length. [ 333.121113][T13883] lo speed is unknown, defaulting to 1000 [ 333.209175][T13894] netlink: 'syz.4.2113': attribute type 5 has an invalid length. [ 333.226765][T13894] netlink: 'syz.4.2113': attribute type 6 has an invalid length. [ 333.621950][T13891] net_ratelimit: 8 callbacks suppressed [ 333.621969][T13891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.904491][T13903] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 333.972523][T13895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.086083][T13913] netlink: 'syz.1.2117': attribute type 20 has an invalid length. [ 334.302675][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.316454][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.337628][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.471986][T13390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.503256][T13390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.944899][T13400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.955274][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.983535][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.026023][T13954] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:65534 [ 335.041162][T13952] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 335.068309][T13952] __nla_validate_parse: 13 callbacks suppressed [ 335.068326][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 335.331212][T13970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'. [ 335.585874][T13989] batadv_slave_1: entered allmulticast mode [ 335.658726][T13989] dvmrp8: entered allmulticast mode [ 335.736816][T13989] batadv_slave_1: left allmulticast mode [ 335.901614][T14011] netlink: 'syz.0.2146': attribute type 1 has an invalid length. [ 335.963242][T14011] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.983853][T14016] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.004400][T14016] bond6: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 336.047267][T14016] bond6: (slave ip_vti0): Error -95 calling set_mac_address [ 336.181267][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 336.192974][T14025] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2150'. [ 336.221162][T14029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2151'. [ 336.436747][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'. [ 336.644561][T14053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2157'. [ 336.658628][T14046] bond7: entered promiscuous mode [ 336.689846][T14046] bond7: entered allmulticast mode [ 336.710624][T14048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2157'. [ 336.773569][T14048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2157'. [ 336.829330][T14048] geneve4: entered promiscuous mode [ 337.095824][T14083] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.2166'. [ 337.130977][T14083] netlink: 'syz.0.2166': attribute type 1 has an invalid length. [ 337.166480][T14077] lo speed is unknown, defaulting to 1000 [ 337.419997][T14083] bridge8: entered promiscuous mode [ 337.642998][T14107] syz_tun: entered allmulticast mode [ 337.924370][T14125] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 338.112379][T14123] bond11: (slave geneve4): making interface the new active one [ 338.127243][T14123] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 338.144495][T14132] 8021q: adding VLAN 0 to HW filter on device bond11 [ 338.381038][ T5744] lo speed is unknown, defaulting to 1000 [ 338.402997][T13407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.424959][T13407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.445909][T13407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.464712][T13407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.698391][ T29] net_ratelimit: 28 callbacks suppressed [ 338.698409][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.856556][T14171] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 338.866269][T14166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.876034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.888109][T14171] netlink: 'syz.1.2188': attribute type 2 has an invalid length. [ 338.903609][T14166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.914156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.998608][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.029870][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.254375][T14196] netlink: 'syz.4.2193': attribute type 14 has an invalid length. [ 339.268482][T14196] netlink: 'syz.4.2193': attribute type 13 has an invalid length. [ 339.349765][T14199] syzkaller1: entered allmulticast mode [ 339.740078][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.824195][T14173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.058790][T13400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.072954][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.379879][T14263] bond12 (unregistering): Released all slaves [ 340.561426][T14280] netlink: 'syz.2.2216': attribute type 11 has an invalid length. [ 340.757278][T14289] __nla_validate_parse: 123 callbacks suppressed [ 340.757394][T14289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2220'. [ 340.883086][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2218'. [ 340.981156][T14293] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2218'. [ 341.206424][T14319] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 341.365858][T14330] netlink: 38059 bytes leftover after parsing attributes in process `syz.4.2229'. [ 341.439646][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 342.485011][T14373] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2243'. [ 342.556173][T14381] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2245'. [ 342.619253][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.754835][ T5744] net_ratelimit: 17 callbacks suppressed [ 343.765544][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.903508][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.659986][T13390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.668493][T13390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.941748][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.068423][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 345.261824][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2252'. [ 345.271596][T14414] sit0: entered promiscuous mode [ 345.276622][T14414] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 345.284613][T14414] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2252'. [ 345.778177][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.786432][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.821685][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.830413][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.840143][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.108380][T13381] net_ratelimit: 10 callbacks suppressed [ 349.108402][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.122575][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.130700][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.498325][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.138158][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.248133][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.256403][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.188147][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.368066][T13385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.376314][T13385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.299276][ T29] net_ratelimit: 7 callbacks suppressed [ 354.299290][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.698376][T13400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.706616][T13400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.348566][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.419569][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.578176][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.808154][T13400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.816411][T13400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.378145][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.918135][T13390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.498201][ T5628] net_ratelimit: 8 callbacks suppressed [ 359.498220][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.258512][T13397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.259215][T14417] netlink: 'syz.1.2254': attribute type 1 has an invalid length. [ 360.283357][T13397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.327990][T14417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2254'. [ 360.335760][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 360.395772][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 360.542642][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.830451][T14458] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2264'. [ 360.909713][T14453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.967142][T14466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.976391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.010069][T14466] netlink: 'syz.3.2266': attribute type 2 has an invalid length. [ 361.020353][T14466] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2266'. [ 361.408592][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.433796][T13381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.572119][T14494] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2275'. [ 361.589341][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.661015][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.701796][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2279'. [ 361.745491][T14503] bond12: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 361.756995][T14506] netlink: 'syz.4.2280': attribute type 1 has an invalid length. [ 361.767049][T14503] bond12: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 361.780564][T14503] bond12: entered allmulticast mode [ 361.831034][T14507] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2280'. [ 361.966500][T14521] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 362.003129][T14521] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 362.083061][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 362.094638][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2286'. [ 362.270386][T14543] ip6gre2: entered promiscuous mode [ 362.276774][T14543] ip6gre2: entered allmulticast mode [ 362.287788][T13397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 362.298146][T13397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 362.309275][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 362.579661][T14560] netlink: 'syz.0.2296': attribute type 11 has an invalid length. [ 362.589949][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 362.592009][T14559] erspan0: entered promiscuous mode [ 362.609030][T14559] gretap0: entered promiscuous mode [ 362.670910][T14560] netlink: 'syz.0.2296': attribute type 11 has an invalid length. [ 363.015812][T14586] syzkaller0: entered allmulticast mode [ 363.092416][T14594] netlink: 'syz.4.2307': attribute type 1 has an invalid length. [ 363.210320][T14594] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.226536][T14594] IPVS: length: 24 != 36888 [ 363.338520][ T5744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.352099][T14614] netlink: 'syz.2.2311': attribute type 10 has an invalid length. [ 363.433058][T14614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.448331][T14614] team0: Device bond0 failed to register rx_handler [ 363.511310][T14616] bridge6: entered promiscuous mode [ 363.516658][T14616] bridge6: entered allmulticast mode [ 363.526850][T14616] team0: Port device bridge6 added [ 363.629317][T14625] SET target dimension over the limit! [ 363.654570][T14620] bridge7: entered promiscuous mode [ 363.683871][T14620] bridge7: entered allmulticast mode [ 363.711074][T14620] team0: Port device bridge7 added [ 363.955847][T14648] netlink: 'syz.4.2320': attribute type 7 has an invalid length. [ 363.978578][T14648] netlink: 'syz.4.2320': attribute type 8 has an invalid length. [ 364.151012][T14658] 8021q: VLANs not supported on nlmon0 [ 364.159845][T13414] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.187738][T14662] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 364.202612][T14662] batman_adv: batadv0: Adding interface: gretap1 [ 364.215961][T14662] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.243825][T14662] batman_adv: batadv0: Interface activated: gretap1 [ 364.278103][T13400] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.287012][T13400] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.296366][T13400] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.675993][T14680] batadv_slave_0: entered allmulticast mode [ 364.691819][T14680] batadv_slave_0: left allmulticast mode [ 364.698204][ T5628] net_ratelimit: 9 callbacks suppressed [ 364.698218][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.711956][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.798937][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.819087][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.026647][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.043431][T14690] geneve1: entered promiscuous mode [ 365.462132][T14713] __nla_validate_parse: 24 callbacks suppressed [ 365.462213][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 365.575733][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2342'. [ 365.629694][T14716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2342'. [ 365.739520][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.817707][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'. [ 365.948091][T13397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.965672][T13397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.107496][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2348'. [ 366.128100][T13397] tipc: Subscription rejected, illegal request [ 366.493035][T14757] netlink: 'syz.3.2350': attribute type 15 has an invalid length. [ 366.698041][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 366.779284][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.078078][T13392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.157070][T14782] lo speed is unknown, defaulting to 1000 [ 367.172393][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 367.409870][T14794] SET target dimension over the limit! [ 367.441718][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 367.458128][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 367.488217][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 367.519553][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 367.591737][T14801] geneve5: entered promiscuous mode [ 368.212590][T14814] bridge0: left promiscuous mode [ 368.217759][T14814] bridge0: left allmulticast mode [ 369.908114][ T5628] net_ratelimit: 13 callbacks suppressed [ 369.908129][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.398078][T13406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.406982][T13406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.726471][T14825] __nla_validate_parse: 3 callbacks suppressed [ 370.726488][T14825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2366'. [ 370.809474][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.956516][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.971407][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'. [ 371.006031][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2367'. [ 371.059029][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 371.083966][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 371.154425][T14837] macvlan2: entered allmulticast mode [ 371.286978][T14853] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2373'. [ 371.302966][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2375'. [ 371.389047][T14861] netlink: 'syz.1.2375': attribute type 39 has an invalid length. [ 371.508292][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.529183][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2377'. [ 371.538844][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.626527][T14869] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2379'. [ 371.743702][T14872] team0 (unregistering): Port device team_slave_0 removed [ 371.789152][T14872] team0 (unregistering): Port device team_slave_1 removed [ 371.803601][T14872] team0 (unregistering): Port device syz_tun removed [ 371.816951][T14872] team0 (unregistering): Port device bridge6 removed [ 371.838488][T14872] team0 (unregistering): Port device bridge7 removed [ 371.962092][T14879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.980538][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.999783][T14879] tipc: Enabled bearer , priority 0 [ 372.045388][T14877] tipc: Disabling bearer [ 372.153052][T14895] openvswitch: netlink: IPv4 tunnel dst address is zero [ 372.603536][T14924] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2397'. [ 372.683675][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.163248][T14952] netlink: 'syz.3.2403': attribute type 2 has an invalid length. [ 373.415435][T14963] xt_l2tp: missing protocol rule (udp|l2tpip) [ 373.660401][T14965] netlink: 'syz.4.2408': attribute type 10 has an invalid length. [ 373.706370][T14965] syz_tun: entered promiscuous mode [ 374.205639][T14992] xt_hl: Unknown Hop Limit match mode: 206 [ 374.593216][T15021] tipc: Enabling of bearer rejected, failed to enable media [ 374.745192][T15027] ±ÿ: renamed from lo (while UP) [ 375.108183][ T5718] net_ratelimit: 9 callbacks suppressed [ 375.108200][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.258036][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 375.328485][T15050] syzkaller0: entered promiscuous mode [ 375.334105][T15050] syzkaller0: entered allmulticast mode [ 375.568145][T13392] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.603919][T13392] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.688505][T13392] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.750158][T13380] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.928396][T15084] __nla_validate_parse: 10 callbacks suppressed [ 375.928415][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 376.018330][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.039767][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.139024][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.372112][T15108] lo speed is unknown, defaulting to 1000 [ 376.770806][T15119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2453'. [ 376.858472][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.937669][T15121] syzkaller0: entered promiscuous mode [ 376.944129][T15121] syzkaller0: entered allmulticast mode [ 377.168441][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.180712][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.191911][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.372321][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2459'. [ 377.637084][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2462'. [ 377.818161][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.962476][T15169] x_tables: duplicate underflow at hook 3 [ 378.220884][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.465619][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.631493][T15186] netlink: 'syz.4.2466': attribute type 6 has an invalid length. [ 379.657290][T15186] netlink: 'syz.4.2466': attribute type 21 has an invalid length. [ 379.675767][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'. [ 379.695083][T15186] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.716858][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'. [ 379.727792][T15186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.735079][T15186] IPv6: NLM_F_CREATE should be set when creating new route [ 379.738835][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'. [ 379.742379][T15186] IPv6: NLM_F_CREATE should be set when creating new route [ 379.758477][T15186] IPv6: NLM_F_CREATE should be set when creating new route [ 379.793210][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'. [ 379.822656][T15196] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2469'. [ 379.987564][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 380.304208][ T5628] net_ratelimit: 7 callbacks suppressed [ 380.304225][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.552291][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.560824][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.340363][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.683707][T13406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.692613][T13406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.961430][T15235] __nla_validate_parse: 3 callbacks suppressed [ 381.961447][T15235] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2478'. [ 382.379931][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.492251][T15267] netlink: 'syz.1.2487': attribute type 15 has an invalid length. [ 382.605787][T15280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.614879][T15280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.624173][T15280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.949705][T15305] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2488'. [ 382.992173][T15307] bond7: option min_links: invalid value (18446744073709551612) [ 383.002553][T15307] bond7: option min_links: allowed values 0 - 2147483647 [ 383.012407][T15307] bond7 (unregistering): Released all slaves [ 383.305513][T15324] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 383.593138][T15332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2501'. [ 383.615848][T15338] PKCS7: Unknown OID: [4] (bad) [ 383.628573][T15338] PKCS7: Only support pkcs7_signedData type [ 384.009137][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'. [ 384.058054][T15358] bridge_slave_0: default FDB implementation only supports local addresses [ 384.330208][T15376] netlink: 'syz.0.2515': attribute type 49 has an invalid length. [ 384.434237][T15378] syzkaller0: entered promiscuous mode [ 384.450166][T15378] syzkaller0: entered allmulticast mode [ 384.462121][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 384.689326][T15397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.824090][T15404] IPv6: NLM_F_CREATE should be specified when creating new route [ 384.846358][T15399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.857649][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'. [ 385.017398][T15408] bond7: entered promiscuous mode [ 385.030524][T15408] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.774646][T15463] syzkaller0: left promiscuous mode [ 385.792721][T15463] syzkaller0: left allmulticast mode [ 386.012646][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 386.095768][T15473] vlan4: entered promiscuous mode [ 386.100982][T15473] hsr0: entered promiscuous mode [ 386.106266][T15473] vlan4: entered allmulticast mode [ 386.113946][T15473] hsr0: entered allmulticast mode [ 386.126947][T15473] hsr_slave_0: entered allmulticast mode [ 386.140741][T15473] hsr_slave_1: entered allmulticast mode [ 386.164403][T15482] tipc: New replicast peer: 255.255.255.255 [ 386.185884][T15482] tipc: Enabled bearer , priority 10 [ 386.194991][T15480] x_tables: duplicate underflow at hook 1 [ 386.479805][T15502] xt_connbytes: Forcing CT accounting to be enabled [ 386.721547][T15517] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2551'. [ 386.794081][T15517] tc_dump_action: action bad kind [ 386.932838][T15525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2556'. [ 387.190296][T15531] syzkaller0: entered promiscuous mode [ 387.192659][T15536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2558'. [ 387.209838][T15531] syzkaller0: entered allmulticast mode [ 387.210276][T15537] netlink: 'syz.1.2560': attribute type 2 has an invalid length. [ 387.281541][T15531] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 387.456512][T15549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2563'. [ 387.497666][T15550] netlink: 'syz.1.2563': attribute type 11 has an invalid length. [ 387.538154][T15549] netlink: 'syz.1.2563': attribute type 11 has an invalid length. [ 387.738449][T13380] wlan1: Trigger new scan to find an IBSS to join [ 387.777544][T15566] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 387.946140][T15583] ipt_REJECT: TCP_RESET invalid for non-tcp [ 387.956413][T15571] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 387.979501][T15571] bond12 (unregistering): Released all slaves [ 388.090353][T15566] bridge11: entered promiscuous mode [ 388.101772][T15566] bond11: (slave bridge11): making interface the new active one [ 388.118411][T15566] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 388.164559][T15580] syzkaller0: entered promiscuous mode [ 388.170364][T15580] syzkaller0: entered allmulticast mode [ 388.203100][T15595] netlink: 'syz.4.2573': attribute type 1 has an invalid length. [ 388.285928][T15595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 390.102286][T15609] veth0_to_bond: entered allmulticast mode [ 390.244547][T15625] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 390.357069][T15629] tap0: tun_chr_ioctl cmd 1074025672 [ 390.380189][T15629] tap0: ignored: set checksum disabled [ 390.630237][T15652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2588'. [ 390.653365][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 390.690806][T15653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2588'. [ 390.703634][T13392] wlan1: Trigger new scan to find an IBSS to join [ 390.712466][T15660] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 390.726782][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 391.217209][T15684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.285060][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 392.216499][T15738] veth1_to_batadv: renamed from veth1_to_team [ 392.414378][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 392.434080][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 392.443375][T15753] netlink: 'syz.1.2616': attribute type 18 has an invalid length. [ 392.451697][T15753] netlink: 'syz.1.2616': attribute type 20 has an invalid length. [ 392.480411][T15756] netlink: 'syz.0.2618': attribute type 1 has an invalid length. [ 392.509507][T15756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2618'. [ 392.542959][T15756] netlink: 'syz.0.2618': attribute type 3 has an invalid length. [ 392.551113][T15756] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2618'. [ 392.554353][T15761] net_ratelimit: 3 callbacks suppressed [ 392.554366][T15761] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 392.929320][T15788] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2626'. [ 392.934551][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 393.023174][T15793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2624'. [ 393.048336][T15796] netlink: 'syz.2.2629': attribute type 3 has an invalid length. [ 393.104652][T15798] ip_tables: iptables: counters copy to user failed while replacing table [ 393.139937][T15785] syzkaller0: entered promiscuous mode [ 393.161688][T15785] syzkaller0: entered allmulticast mode [ 393.484589][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 394.052367][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 394.078889][T15848] ip_tables: iptables: counters copy to user failed while replacing table [ 394.204030][T15843] 8021q: adding VLAN 0 to HW filter on device bond13 [ 394.265529][T15854] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 394.290935][T15854] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 394.515846][T15871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.532552][T15868] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2651'. [ 394.628115][T15867] bond14: entered promiscuous mode [ 394.633742][T15867] 8021q: adding VLAN 0 to HW filter on device bond14 [ 394.798807][T15888] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 394.884969][T15888] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 394.920209][T15888] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 394.957110][T15888] bond0 (unregistering): Released all slaves [ 395.060596][T15879] 8021q: adding VLAN 0 to HW filter on device bond13 [ 395.078250][T15879] bond13 (unregistering): Released all slaves [ 395.106669][T15886] syzkaller1: entered promiscuous mode [ 395.114525][T15886] syzkaller1: entered allmulticast mode [ 395.227175][T15911] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 395.259906][T15907] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 395.690238][T15931] syzkaller0: entered promiscuous mode [ 395.728137][T15931] syzkaller0: entered allmulticast mode [ 396.127689][T15958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.158541][T15958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.183345][T15958] bond0 (unregistering): Released all slaves [ 396.851054][T15986] vlan1: entered promiscuous mode [ 398.370358][T15922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.732031][T16012] __nla_validate_parse: 5 callbacks suppressed [ 398.732049][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 398.786254][T16012] No such timeout policy "s" [ 398.803570][T16012] netlink: Failed to associated timeout policy 's' [ 399.524414][T16036] x_tables: duplicate underflow at hook 1 [ 399.552575][T16036] tap0: tun_chr_ioctl cmd 2148553947 [ 400.000162][T16067] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2692'. [ 400.028172][T16067] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2692'. [ 400.037600][T16067] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2692'. [ 400.050097][T16067] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2692'. [ 400.236700][T16073] veth0: entered promiscuous mode [ 400.261947][T16073] veth0: entered allmulticast mode [ 400.316043][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 400.330874][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2695'. [ 400.402193][T16085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2697'. [ 400.517014][T16090] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2701'. [ 400.656038][T16093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.686223][T16095] syzkaller1: entered promiscuous mode [ 400.693541][T16095] syzkaller1: entered allmulticast mode [ 400.733509][T16096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.748976][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 401.224738][T16103] syzkaller0: entered promiscuous mode [ 401.233558][T16103] syzkaller0: entered allmulticast mode [ 401.257257][T16103] tipc: Enabled bearer , priority 0 [ 401.271793][T16105] syzkaller0: entered promiscuous mode [ 401.278013][T16105] syzkaller0: entered allmulticast mode [ 401.290075][T16103] tipc: Resetting bearer [ 401.316785][T16102] tipc: Resetting bearer [ 401.340829][T16102] tipc: Disabling bearer [ 401.363859][T16105] 0: reclassify loop, rule prio 0, protocol 700 [ 401.707351][T16129] macsec1: entered promiscuous mode [ 401.834500][T16128] lo speed is unknown, defaulting to 1000 [ 402.033329][T16129] xt_hashlimit: size too large, truncated to 1048576 [ 402.087328][T16139] lo speed is unknown, defaulting to 1000 [ 402.324229][T16160] netlink: 'syz.2.2719': attribute type 1 has an invalid length. [ 402.587571][T16157] veth5: entered allmulticast mode [ 402.627688][T16157] bond0: (slave veth5): Enslaving as an active interface with a down link [ 402.685629][T16160] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 402.855083][T16132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.931833][ T9] lo speed is unknown, defaulting to 1000 [ 402.960500][ T9] syz2: Port: 1 Link ACTIVE [ 403.042020][T16186] netlink: 'syz.2.2725': attribute type 2 has an invalid length. [ 403.078187][T16186] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 403.692921][T16219] syz_tun: left promiscuous mode [ 403.855462][T16228] syzkaller0: entered promiscuous mode [ 403.863099][T16228] syzkaller0: entered allmulticast mode [ 403.906665][T16228] tipc: Enabled bearer , priority 0 [ 403.943012][T16228] tipc: Resetting bearer [ 404.175996][T16232] netlink: 'syz.0.2740': attribute type 4 has an invalid length. [ 404.186199][T16227] tipc: Resetting bearer [ 404.208820][T16233] netlink: 'syz.0.2740': attribute type 4 has an invalid length. [ 404.247494][T16227] tipc: Disabling bearer [ 404.460113][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.699081][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.709020][T13380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.719703][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.731592][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.826368][T16284] netlink: 'syz.1.2752': attribute type 1 has an invalid length. [ 404.845051][T13380] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 404.867938][T16284] netlink: 'syz.1.2752': attribute type 12 has an invalid length. [ 404.876064][T16284] __nla_validate_parse: 6 callbacks suppressed [ 404.876077][T16284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2752'. [ 404.892264][T16286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2753'. [ 404.904494][T16258] bond0: entered promiscuous mode [ 404.961630][T16258] batadv0: entered promiscuous mode [ 404.976912][T16258] debugfs: 'hsr0' already exists in 'hsr' [ 405.001711][T16258] Cannot create hsr debugfs directory [ 405.024072][T16258] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 405.073466][T16258] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 405.092516][T16258] bond0: left promiscuous mode [ 405.109183][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.119661][T16258] batadv0: left promiscuous mode [ 405.167389][T16304] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2756'. [ 405.978364][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.988964][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.999158][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.148070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.647395][T16275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.874319][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2768'. [ 408.001674][T16359] netlink: 'syz.2.2768': attribute type 2 has an invalid length. [ 408.286275][T16379] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2775'. [ 408.414135][T16384] netlink: 'syz.0.2776': attribute type 5 has an invalid length. [ 408.444466][T16384] netlink: 'syz.0.2776': attribute type 9 has an invalid length. [ 408.453723][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2777'. [ 408.457890][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 408.768759][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 408.846524][T16401] netlink: 'syz.3.2786': attribute type 1 has an invalid length. [ 408.880821][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2786'. [ 408.952992][T16401] bond0: Caught tx_queue_len zero misconfig [ 409.253964][T16423] xt_cgroup: invalid path, errno=-2 [ 409.291861][T16427] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2792'. [ 409.642270][T16442] lo speed is unknown, defaulting to 1000 [ 409.697184][T16449] net_ratelimit: 10 callbacks suppressed [ 409.697203][T16449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.776527][T16452] ip_tables: iptables: counters copy to user failed while replacing table [ 409.799535][T16446] tipc: Enabled bearer , priority 0 [ 409.889002][T16446] syzkaller0: entered promiscuous mode [ 409.895119][T16446] syzkaller0: entered allmulticast mode [ 409.903999][T16450] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 410.138144][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.215188][T16475] __nla_validate_parse: 1 callbacks suppressed [ 410.215206][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 410.231210][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2807'. [ 410.459805][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.470333][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.479548][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.488544][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.703087][T16444] tipc: Resetting bearer [ 410.743816][T16444] tipc: Disabling bearer [ 411.006606][T16479] pim6reg: entered allmulticast mode [ 411.077017][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.088572][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.098512][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.110649][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.122373][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.171203][T16479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 411.238679][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.251708][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.270928][T16495] pim6reg: left allmulticast mode [ 411.345640][T16500] tipc: Enabling of bearer rejected, failed to enable media [ 411.370266][T16497] netlink: 'syz.3.2812': attribute type 1 has an invalid length. [ 411.405893][T16497] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2812'. [ 411.584051][ T5622] syz_tun (unregistering): left allmulticast mode [ 411.635190][T16516] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 411.840738][T16509] IPVS: Scheduler module ip_vs_sip not found [ 411.854202][T16528] netlink: 'syz.1.2820': attribute type 5 has an invalid length. [ 411.873159][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 411.901537][T16526] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2819'. [ 412.118017][T16483] lo speed is unknown, defaulting to 1000 [ 412.657289][T16483] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.673750][T16483] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.682707][T16483] bridge_slave_0: entered allmulticast mode [ 412.695602][T16483] bridge_slave_0: entered promiscuous mode [ 412.711923][T16483] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.720936][T16483] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.728925][T16483] bridge_slave_1: entered allmulticast mode [ 412.736700][T16483] bridge_slave_1: entered promiscuous mode [ 412.745793][T16559] syzkaller1: entered promiscuous mode [ 412.752030][T16559] syzkaller1: entered allmulticast mode [ 412.801422][T16483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.816348][T16483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.861437][T16483] team0: Port device team_slave_0 added [ 412.872066][T16483] team0: Port device team_slave_1 added [ 412.911188][T16483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.918471][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.946046][T16483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.962090][T16483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.969852][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.997368][T16483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.178026][ T5629] Bluetooth: hci5: command tx timeout [ 414.298338][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 415.007532][T16483] hsr_slave_0: entered promiscuous mode [ 415.032767][T16483] hsr_slave_1: entered promiscuous mode [ 415.053079][T16483] debugfs: 'hsr0' already exists in 'hsr' [ 415.065719][T16483] Cannot create hsr debugfs directory [ 415.191920][T16596] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2833'. [ 415.268713][ T5629] Bluetooth: hci5: command tx timeout [ 415.406291][T16586] xt_TCPMSS: Only works on TCP SYN packets [ 415.420754][ T5726] net_ratelimit: 8 callbacks suppressed [ 415.420770][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.511871][T16608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.617138][T16615] netlink: 'syz.2.2840': attribute type 4 has an invalid length. [ 415.644157][T16615] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2840'. [ 415.666849][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2843'. [ 415.679363][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 415.688546][T16617] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2841'. [ 415.717071][T16483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.337926][ T5629] Bluetooth: hci5: command tx timeout [ 418.781948][T16635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2846'. [ 418.799248][T16635] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2846'. [ 418.932097][T16483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.960148][T16636] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.060990][T16644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2848'. [ 419.187013][T16483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.407763][T16483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.433620][ T5629] Bluetooth: hci5: command tx timeout [ 419.490335][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 419.505860][T16666] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2856'. [ 419.670204][T16672] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 419.704221][T16672] lo speed is unknown, defaulting to 1000 [ 419.855926][T16677] smc: net device lo applied user defined pnetid SYZ0 [ 420.365474][T16684] nbd: socks must be embedded in a SOCK_ITEM attr [ 422.554995][T16483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.598731][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.616625][T16483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.654232][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.730390][T16697] xt_TPROXY: Can be used only with -p tcp or -p udp [ 422.868731][T16483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.895350][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.903798][T16483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.915629][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.189210][T16722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2870'. [ 423.214429][T16722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2870'. [ 425.594697][T16688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.831256][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2873'. [ 425.947368][T16483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.970366][T16750] batman_adv: batadv0: Adding interface: gretap2 [ 425.976752][T16750] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.002987][T16750] batman_adv: batadv0: Interface activated: gretap2 [ 426.035571][T16483] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.056363][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.063496][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.091893][T13380] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.098983][T13380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.625972][T16483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.916667][T16771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2878'. [ 427.426723][T16483] veth0_vlan: entered promiscuous mode [ 427.455329][T16483] veth1_vlan: entered promiscuous mode [ 427.545078][T16483] veth0_macvtap: entered promiscuous mode [ 427.578224][T16483] veth1_macvtap: entered promiscuous mode [ 427.644329][T16483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.672527][T16483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.779923][T13397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.814031][T13397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.872920][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2887'. [ 427.889617][T13380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.924046][T13380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.128110][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 428.135623][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.176628][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.281111][ T6911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.313946][ T6911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.504155][ T30] audit: type=1804 audit(1785946634.912:6): pid=16834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2894" name="/newroot/595/cgroup.controllers" dev="tmpfs" ino=3063 res=1 errno=0 [ 428.547902][ T30] audit: type=1800 audit(1785946634.942:7): pid=16834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2894" name="cgroup.controllers" dev="tmpfs" ino=3063 res=0 errno=0 [ 428.868520][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'. [ 428.955068][T16868] team_slave_1: Caught tx_queue_len zero misconfig [ 428.983425][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2904'. [ 429.167292][T16882] tipc: MTU too low for tipc bearer [ 429.386934][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2909'. [ 429.417445][T16887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2909'. [ 429.646081][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.668497][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.679665][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.694679][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.704806][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.913775][T16905] hsr0: entered allmulticast mode [ 429.934243][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2914'. [ 429.983857][T16905] hsr_slave_0: entered allmulticast mode [ 430.025278][T16905] hsr_slave_1: entered allmulticast mode [ 430.096015][T16906] hsr_slave_0: left promiscuous mode [ 430.104299][T16906] hsr_slave_1: left promiscuous mode [ 430.156105][T16906] hsr0 (unregistering): left allmulticast mode [ 430.352671][ T6911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.532027][ T6911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.682098][T16946] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 430.776270][ T6911] team0: Port device netdevsim1 removed [ 430.787274][ T6911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.835371][T16898] lo speed is unknown, defaulting to 1000 [ 430.956673][ T6911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.979494][T16961] netlink: 'syz.4.2929': attribute type 3 has an invalid length. [ 430.987357][T16961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2929'. [ 431.201269][T16958] x_tables: duplicate underflow at hook 3 [ 431.330438][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'. [ 431.396375][T16977] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2933'. [ 431.407305][T16978] netlink: ct family unspecified [ 431.415937][T16978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.435723][T16982] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2933'. [ 431.613553][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2934'. [ 431.738152][ T5629] Bluetooth: hci2: command tx timeout [ 431.794469][ T6911] veth0_virt_wifi: left allmulticast mode [ 431.803614][ T6911] veth0_virt_wifi: left promiscuous mode [ 431.815711][ T6911] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 431.856696][ T6911] dvmrp8: left allmulticast mode [ 432.155654][ T6911] bond6 (unregistering): (slave vlan2): Releasing backup interface [ 432.245665][T17010] netlink: 'syz.0.2936': attribute type 1 has an invalid length. [ 432.269086][ T6911] bond11 (unregistering): (slave geneve4): Releasing active interface [ 432.335862][ T6911] team0: Port device bridge0 removed [ 432.404460][ T6911] bond10 (unregistering): (slave bridge5): Releasing backup interface [ 432.412912][ T6911] bridge5 (unregistering): left promiscuous mode [ 432.428029][ T6911] bond1 (unregistering): Released all slaves [ 432.444290][ T6911] bond2 (unregistering): (slave veth3): Releasing active interface [ 432.458890][ T6911] bond2 (unregistering): Released all slaves [ 432.483009][ T6911] bond3 (unregistering): Released all slaves [ 432.510593][ T6911] bond4 (unregistering): Released all slaves [ 432.545490][ T6911] bond5 (unregistering): Released all slaves [ 432.570263][ T6911] bond6 (unregistering): Released all slaves [ 432.594138][ T6911] bond7 (unregistering): Released all slaves [ 432.637587][ T6911] bond8 (unregistering): Released all slaves [ 432.659086][ T6911] bond9 (unregistering): Released all slaves [ 432.701297][ T6911] bond10 (unregistering): Released all slaves [ 432.726298][ T6911] bond11 (unregistering): Released all slaves [ 432.744017][ T6911] bond12 (unregistering): Released all slaves [ 432.772316][ T6911] bond13 (unregistering): Released all slaves [ 432.797489][ T6911] bond14 (unregistering): Released all slaves [ 432.980923][T17010] bond13: entered promiscuous mode [ 432.986546][T17010] 8021q: adding VLAN 0 to HW filter on device bond13 [ 433.023222][T17012] 8021q: adding VLAN 0 to HW filter on device bond13 [ 433.044006][T17012] bond13: (slave xfrm1): The slave device specified does not support setting the MAC address [ 433.054827][T17012] bond13: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 433.095887][T17012] bond13: (slave xfrm1): making interface the new active one [ 433.110436][T17012] xfrm1: entered promiscuous mode [ 433.136555][T17012] bond13: (slave xfrm1): Enslaving as an active interface with an up link [ 433.154920][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 433.193241][ T6911] tipc: Left network mode [ 433.520574][T16898] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.555857][T16898] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.566943][T16898] bridge_slave_0: entered allmulticast mode [ 433.591482][T16898] bridge_slave_0: entered promiscuous mode [ 433.613394][T16898] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.620749][T16898] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.628298][T16898] bridge_slave_1: entered allmulticast mode [ 433.636110][T16898] bridge_slave_1: entered promiscuous mode [ 433.729116][T17056] netlink: 'syz.3.2947': attribute type 1 has an invalid length. [ 433.818918][ T5629] Bluetooth: hci2: command tx timeout [ 433.831563][T16898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.844829][T16898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.919341][T17057] bond7: (slave bridge6): making interface the new active one [ 433.944587][T17057] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 434.014375][T17073] Bluetooth: MGMT ver 1.23 [ 434.191290][T16898] team0: Port device team_slave_0 added [ 434.316193][T16898] team0: Port device team_slave_1 added [ 434.493107][T16898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.527377][T16898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.585225][T16898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.616471][T16898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.634136][T16898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.688125][T16898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.913026][ T6911] hsr_slave_0: left promiscuous mode [ 434.935356][ T6911] hsr_slave_1: left promiscuous mode [ 435.261606][T17126] __nla_validate_parse: 3 callbacks suppressed [ 435.261624][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'. [ 435.662517][ T809] lo speed is unknown, defaulting to 1000 [ 435.669196][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 435.680228][ T809] syz2: Port: 1 Link DOWN [ 435.791760][ T759] smbdirect: ib_dev[syz2] removed [ 435.898575][ T5629] Bluetooth: hci2: command tx timeout [ 435.927747][T16898] hsr_slave_0: entered promiscuous mode [ 435.944053][T16898] hsr_slave_1: entered promiscuous mode [ 435.952296][T16898] debugfs: 'hsr0' already exists in 'hsr' [ 435.958366][T16898] Cannot create hsr debugfs directory [ 435.995299][T17150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2963'. [ 436.265730][T17153] ip6tnl1: entered promiscuous mode [ 436.350945][ T6911] IPVS: stop unused estimator thread 0... [ 436.760784][T17188] xt_HMARK: proto mask must be zero with L3 mode [ 437.560198][T17203] bridge12: entered allmulticast mode [ 437.593333][T17217] tipc: Enabled bearer , priority 10 [ 437.789686][T17232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2981'. [ 437.978665][ T5629] Bluetooth: hci2: command tx timeout [ 438.211927][T17257] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 438.232618][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 438.251993][T17257] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 438.282820][T17258] veth0: Caught tx_queue_len zero misconfig [ 438.290113][T17257] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 438.572301][T17276] team0: Port device xfrm0 added [ 438.600733][T16898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 438.632505][T17276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2990'. [ 438.672503][T16898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.682485][T17283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2992'. [ 438.715698][T16898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 438.753258][T16898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.772712][T16898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.823008][T16898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.851009][T17290] netlink: 'syz.3.2994': attribute type 5 has an invalid length. [ 438.858698][T16898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.873615][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 438.889260][T16898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.169166][T16898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.185552][T17315] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 439.256007][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'. [ 439.311560][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2997'. [ 439.348811][T17315] bond14: entered promiscuous mode [ 439.361889][T17315] 8021q: adding VLAN 0 to HW filter on device bond14 [ 439.571184][T16898] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.680973][T17333] gtp2: entered promiscuous mode [ 439.697651][T17333] gtp2: entered allmulticast mode [ 439.714791][T17333] team0: Device gtp2 is of different type [ 439.900204][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.909550][T13392] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.916749][T13392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.017733][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.024924][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.805815][T17384] x_tables: duplicate entry at hook 4 [ 441.062699][T17396] Cannot find add_set index 0 as target [ 441.095644][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'. [ 441.176747][T17397] ip6gre1: entered promiscuous mode [ 441.223343][T17397] ip6gre1: entered allmulticast mode [ 441.521983][T16898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.544049][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3016'. [ 441.791497][T16898] veth0_vlan: entered promiscuous mode [ 441.840072][T16898] veth1_vlan: entered promiscuous mode [ 441.896972][ T30] audit: type=1804 audit(1785946648.302:8): pid=17441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3018" name="/newroot/616/cgroup.controllers" dev="tmpfs" ino=3173 res=1 errno=0 [ 441.905642][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 441.971835][ T30] audit: type=1800 audit(1785946648.302:9): pid=17441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3018" name="cgroup.controllers" dev="tmpfs" ino=3173 res=0 errno=0 [ 442.062145][T16898] veth0_macvtap: entered promiscuous mode [ 442.113221][T16898] veth1_macvtap: entered promiscuous mode [ 442.197534][T16898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.234445][T16898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.409065][T13392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.519497][T13406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.562472][T13406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.671380][T17476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'. [ 442.778597][T13406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.821871][T13406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.850383][T13406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.941996][T17493] netlink: 'syz.2.3031': attribute type 13 has an invalid length. [ 442.964695][ T759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.024734][ T759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.034309][T17498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3031'. [ 443.203422][T17511] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3034'. [ 443.320944][ T5718] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.439993][T17498] bond_slave_0: entered promiscuous mode [ 443.476557][T17498] bond_slave_0: entered allmulticast mode [ 443.595287][T17522] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3037'. [ 443.742943][ T12] wlan0: Trigger new scan to find an IBSS to join [ 443.898068][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.123803][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 444.166446][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3044'. [ 444.200026][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 444.214729][T17551] netlink: 'syz.0.3045': attribute type 1 has an invalid length. [ 444.230258][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 444.240222][T17551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3045'. [ 444.259976][T17551] netlink: 'syz.0.3045': attribute type 7 has an invalid length. [ 444.267993][T17551] netlink: 'syz.0.3045': attribute type 8 has an invalid length. [ 444.281247][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 444.289357][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 444.301997][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 444.677747][ T5623] batman_adv: batadv0: Interface deactivated: macsec0 [ 444.701764][ T5623] syz_tun (unregistering): left allmulticast mode [ 444.727408][ T5623] batman_adv: batadv0: Removing interface: macsec0 [ 444.794106][T17577] netlink: 'syz.1.3048': attribute type 16 has an invalid length. [ 444.812885][T17577] netlink: 'syz.1.3048': attribute type 17 has an invalid length. [ 444.849887][T17546] nbd0: detected capacity change from 0 to 127 [ 444.859858][ T5641] block nbd0: Receive control failed (result -32) [ 444.902905][ T1641] [ 444.905248][ T1641] ====================================================== [ 444.912260][ T1641] WARNING: possible circular locking dependency detected [ 444.919282][ T1641] syzkaller #0 Not tainted [ 444.923690][ T1641] ------------------------------------------------------ [ 444.929580][T17551] netlink: 'syz.0.3045': attribute type 1 has an invalid length. [ 444.930697][ T1641] kworker/0:1H/1641 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 444.930710][ T1641] ffff88807aa6ca68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150 [ 444.953576][ T1641] [ 444.953576][ T1641] but task is already holding lock: [ 444.960936][ T1641] ffff88802a0351f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 444.969472][ T1641] [ 444.969472][ T1641] which lock already depends on the new lock. [ 444.969472][ T1641] [ 444.979868][ T1641] [ 444.979868][ T1641] the existing dependency chain (in reverse order) is: [ 444.988873][ T1641] [ 444.988873][ T1641] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 444.996090][ T1641] __mutex_lock+0x19d/0x1550 [ 445.001213][ T1641] nbd_queue_rq+0xc1/0x1150 [ 445.006235][ T1641] blk_mq_dispatch_rq_list+0x499/0x1990 [ 445.012297][ T1641] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 445.019138][ T1641] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 445.025633][ T1641] blk_mq_run_work_fn+0x16c/0x300 [ 445.031174][ T1641] process_scheduled_works+0xa8e/0x14e0 [ 445.037224][ T1641] worker_thread+0xa47/0xfb0 [ 445.042323][ T1641] kthread+0x388/0x470 [ 445.046902][ T1641] ret_from_fork+0x514/0xb70 [ 445.052000][ T1641] ret_from_fork_asm+0x1a/0x30 [ 445.057267][ T1641] [ 445.057267][ T1641] -> #5 (set->srcu){.+.+}-{0:0}: [ 445.064379][ T1641] __synchronize_srcu+0xc9/0x2f0 [ 445.069832][ T1641] elevator_switch+0x1e8/0x7b0 [ 445.075103][ T1641] elevator_change+0x2fa/0x480 [ 445.080373][ T1641] elevator_set_default+0x375/0x440 [ 445.086079][ T1641] blk_register_queue+0x3f3/0x4e0 [ 445.091608][ T1641] __add_disk+0x6cb/0xe30 [ 445.096443][ T1641] add_disk_fwnode+0x100/0x3a0 [ 445.101709][ T1641] nbd_dev_add+0x733/0xb60 [ 445.106627][ T1641] nbd_init+0x15f/0x1e0 [ 445.111287][ T1641] do_one_initcall+0x250/0x870 [ 445.116565][ T1641] do_initcall_level+0x10a/0x1a0 [ 445.122010][ T1641] do_initcalls+0x59/0xa0 [ 445.126846][ T1641] kernel_init_freeable+0x29d/0x3e0 [ 445.132550][ T1641] kernel_init+0x1d/0x1d0 [ 445.137385][ T1641] ret_from_fork+0x514/0xb70 [ 445.142482][ T1641] ret_from_fork_asm+0x1a/0x30 [ 445.147746][ T1641] [ 445.147746][ T1641] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 445.155551][ T1641] __mutex_lock+0x19d/0x1550 [ 445.160650][ T1641] elevator_change+0x1af/0x480 [ 445.165922][ T1641] elevator_set_none+0xb5/0x140 [ 445.171292][ T1641] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 445.177602][ T1641] nbd_start_device+0x189/0xb30 [ 445.182956][ T1641] nbd_genl_connect+0x1597/0x1c10 [ 445.188480][ T1641] genl_family_rcv_msg_doit+0x233/0x340 [ 445.194528][ T1641] genl_rcv_msg+0x614/0x7a0 [ 445.199536][ T1641] netlink_rcv_skb+0x226/0x4a0 [ 445.204806][ T1641] genl_rcv+0x28/0x40 [ 445.209287][ T1641] netlink_unicast+0x7bb/0x940 [ 445.214557][ T1641] netlink_sendmsg+0x813/0xb40 [ 445.219827][ T1641] sock_sendmsg_nosec+0x13a/0x180 [ 445.225359][ T1641] ____sys_sendmsg+0x54e/0x850 [ 445.230627][ T1641] ___sys_sendmsg+0x2a5/0x360 [ 445.235809][ T1641] __x64_sys_sendmsg+0x1b1/0x290 [ 445.241250][ T1641] do_syscall_64+0x174/0x580 [ 445.246351][ T1641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.252744][ T1641] [ 445.252744][ T1641] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 445.261332][ T1641] blk_alloc_queue+0x544/0x690 [ 445.266604][ T1641] __blk_mq_alloc_disk+0x194/0x390 [ 445.272218][ T1641] nbd_dev_add+0x494/0xb60 [ 445.277139][ T1641] nbd_init+0x15f/0x1e0 [ 445.281795][ T1641] do_one_initcall+0x250/0x870 [ 445.287065][ T1641] do_initcall_level+0x10a/0x1a0 [ 445.292511][ T1641] do_initcalls+0x59/0xa0 [ 445.297347][ T1641] kernel_init_freeable+0x29d/0x3e0 [ 445.303049][ T1641] kernel_init+0x1d/0x1d0 [ 445.307884][ T1641] ret_from_fork+0x514/0xb70 [ 445.312991][ T1641] ret_from_fork_asm+0x1a/0x30 [ 445.318259][ T1641] [ 445.318259][ T1641] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 445.325451][ T1641] fs_reclaim_acquire+0x71/0x100 [ 445.330896][ T1641] __kmalloc_noprof+0xbc/0x720 [ 445.336175][ T1641] tls_sw_sendmsg+0x599/0x2860 [ 445.341440][ T1641] sock_sendmsg_nosec+0x90/0x180 [ 445.346885][ T1641] sock_sendmsg+0x1ca/0x2d0 [ 445.351899][ T1641] splice_to_socket+0xb5e/0x12a0 [ 445.357343][ T1641] direct_splice_actor+0x101/0x160 [ 445.362974][ T1641] splice_direct_to_actor+0x57b/0xcb0 [ 445.368873][ T1641] do_splice_direct+0x195/0x290 [ 445.374241][ T1641] do_sendfile+0x52e/0x7c0 [ 445.379164][ T1641] __se_sys_sendfile64+0x144/0x1a0 [ 445.384786][ T1641] do_syscall_64+0x174/0x580 [ 445.389885][ T1641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.396313][ T1641] [ 445.396313][ T1641] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 445.404376][ T1641] lock_sock_nested+0x41/0x100 [ 445.409655][ T1641] inet_shutdown+0x6a/0x390 [ 445.414666][ T1641] nbd_mark_nsock_dead+0x2cb/0x550 [ 445.420282][ T1641] sock_shutdown+0x15e/0x260 [ 445.425380][ T1641] nbd_clear_sock+0x24/0x170 [ 445.430476][ T1641] nbd_config_put+0x35b/0x660 [ 445.435659][ T1641] nbd_genl_connect+0x18f7/0x1c10 [ 445.441188][ T1641] genl_family_rcv_msg_doit+0x233/0x340 [ 445.447238][ T1641] genl_rcv_msg+0x614/0x7a0 [ 445.452245][ T1641] netlink_rcv_skb+0x226/0x4a0 [ 445.457515][ T1641] genl_rcv+0x28/0x40 [ 445.462003][ T1641] netlink_unicast+0x7bb/0x940 [ 445.467276][ T1641] netlink_sendmsg+0x813/0xb40 [ 445.472544][ T1641] sock_sendmsg_nosec+0x13a/0x180 [ 445.478081][ T1641] ____sys_sendmsg+0x54e/0x850 [ 445.483349][ T1641] ___sys_sendmsg+0x2a5/0x360 [ 445.488529][ T1641] __x64_sys_sendmsg+0x1b1/0x290 [ 445.493974][ T1641] do_syscall_64+0x174/0x580 [ 445.499075][ T1641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.505478][ T1641] [ 445.505478][ T1641] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 445.513107][ T1641] __lock_acquire+0x1520/0x2cf0 [ 445.518468][ T1641] lock_acquire+0x106/0x350 [ 445.523479][ T1641] __mutex_lock+0x19d/0x1550 [ 445.528576][ T1641] nbd_queue_rq+0x373/0x1150 [ 445.533671][ T1641] blk_mq_dispatch_rq_list+0x499/0x1990 [ 445.539729][ T1641] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 445.546569][ T1641] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 445.553058][ T1641] blk_mq_run_work_fn+0x16c/0x300 [ 445.558586][ T1641] process_scheduled_works+0xa8e/0x14e0 [ 445.564637][ T1641] worker_thread+0xa47/0xfb0 [ 445.569730][ T1641] kthread+0x388/0x470 [ 445.574306][ T1641] ret_from_fork+0x514/0xb70 [ 445.579402][ T1641] ret_from_fork_asm+0x1a/0x30 [ 445.584669][ T1641] [ 445.584669][ T1641] other info that might help us debug this: [ 445.584669][ T1641] [ 445.594875][ T1641] Chain exists of: [ 445.594875][ T1641] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 445.594875][ T1641] [ 445.606937][ T1641] Possible unsafe locking scenario: [ 445.606937][ T1641] [ 445.614372][ T1641] CPU0 CPU1 [ 445.619719][ T1641] ---- ---- [ 445.625066][ T1641] lock(&cmd->lock); [ 445.629032][ T1641] lock(set->srcu); [ 445.635431][ T1641] lock(&cmd->lock); [ 445.641912][ T1641] lock(&nsock->tx_lock); [ 445.646311][ T1641] [ 445.646311][ T1641] *** DEADLOCK *** [ 445.646311][ T1641] [ 445.654433][ T1641] 4 locks held by kworker/0:1H/1641: [ 445.659696][ T1641] #0: ffff88801eac7d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 445.670731][ T1641] #1: ffffc90006d2fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 445.683586][ T1641] #2: ffff888026f58d18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 445.692967][ T1641] #3: ffff88802a0351f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 445.701916][ T1641] [ 445.701916][ T1641] stack backtrace: [ 445.707788][ T1641] CPU: 0 UID: 0 PID: 1641 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 445.707808][ T1641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.707819][ T1641] Workqueue: kblockd blk_mq_run_work_fn [ 445.707905][ T1641] Call Trace: [ 445.707913][ T1641] [ 445.707919][ T1641] dump_stack_lvl+0xe8/0x150 [ 445.707948][ T1641] print_circular_bug+0x2e1/0x300 [ 445.707964][ T1641] check_noncircular+0x12e/0x150 [ 445.707981][ T1641] __lock_acquire+0x1520/0x2cf0 [ 445.708009][ T1641] ? nbd_queue_rq+0x373/0x1150 [ 445.708023][ T1641] lock_acquire+0x106/0x350 [ 445.708041][ T1641] ? nbd_queue_rq+0x373/0x1150 [ 445.708060][ T1641] __mutex_lock+0x19d/0x1550 [ 445.708080][ T1641] ? nbd_queue_rq+0x373/0x1150 [ 445.708095][ T1641] ? ret_from_fork_asm+0x1a/0x30 [ 445.708108][ T1641] ? unwind_next_frame+0x8f/0x2550 [ 445.708125][ T1641] ? nbd_queue_rq+0x373/0x1150 [ 445.708140][ T1641] ? __pfx___mutex_lock+0x10/0x10 [ 445.708160][ T1641] ? ret_from_fork_asm+0x1a/0x30 [ 445.708174][ T1641] ? stack_trace_save+0xa9/0x100 [ 445.708192][ T1641] ? __pfx_stack_trace_save+0x10/0x10 [ 445.708211][ T1641] nbd_queue_rq+0x373/0x1150 [ 445.708227][ T1641] ? __lock_acquire+0x13e8/0x2cf0 [ 445.708247][ T1641] ? __pfx_nbd_queue_rq+0x10/0x10 [ 445.708266][ T1641] blk_mq_dispatch_rq_list+0x499/0x1990 [ 445.708292][ T1641] ? sbitmap_get+0x229/0x390 [ 445.708306][ T1641] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 445.708326][ T1641] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 445.708348][ T1641] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 445.708377][ T1641] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 445.708401][ T1641] ? blk_mq_run_work_fn+0x144/0x300 [ 445.708418][ T1641] ? blk_mq_run_work_fn+0x144/0x300 [ 445.708436][ T1641] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 445.708460][ T1641] ? blk_mq_run_work_fn+0x144/0x300 [ 445.708475][ T1641] blk_mq_run_work_fn+0x16c/0x300 [ 445.708491][ T1641] ? process_scheduled_works+0xa20/0x14e0 [ 445.708508][ T1641] process_scheduled_works+0xa8e/0x14e0 [ 445.708533][ T1641] ? __pfx_process_scheduled_works+0x10/0x10 [ 445.708552][ T1641] ? assign_work+0x3cf/0x5d0 [ 445.708569][ T1641] worker_thread+0xa47/0xfb0 [ 445.708590][ T1641] ? __kthread_parkme+0x71/0x1f0 [ 445.708611][ T1641] kthread+0x388/0x470 [ 445.708631][ T1641] ? __pfx_worker_thread+0x10/0x10 [ 445.708646][ T1641] ? __pfx_kthread+0x10/0x10 [ 445.708666][ T1641] ret_from_fork+0x514/0xb70 [ 445.708687][ T1641] ? __pfx_ret_from_fork+0x10/0x10 [ 445.708707][ T1641] ? __switch_to+0xc89/0x1420 [ 445.708725][ T1641] ? __pfx_kthread+0x10/0x10 [ 445.708745][ T1641] ret_from_fork_asm+0x1a/0x30 [ 445.708763][ T1641] [ 446.008637][ T1641] block nbd0: Dead connection, failed to find a fallback [ 446.015706][ T1641] block nbd0: shutting down sockets [ 446.021005][ T1641] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.030518][ T1641] Buffer I/O error on dev nbd0, logical block 0, async page read [ 446.039196][ T1641] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 446.048709][ T1641] Buffer I/O error on dev nbd0, logical block 1, async page read [ 446.056432][ T1641] Buffer I/O error on dev nbd0, logical block 2, async page read [ 446.064228][ T1641] Buffer I/O error on dev nbd0, logical block 3, async page read [ 446.169620][ T1567] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.179674][ T1567] Buffer I/O error on dev nbd0, logical block 0, async page read [ 446.191779][ T1567] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.201500][ T1567] Buffer I/O error on dev nbd0, logical block 1, async page read [ 446.209852][ T1567] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.222459][ T1567] Buffer I/O error on dev nbd0, logical block 2, async page read [ 446.230669][ T1567] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.247673][ T1567] Buffer I/O error on dev nbd0, logical block 3, async page read [ 446.264953][T17587] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.274539][T17587] Buffer I/O error on dev nbd0, logical block 0, async page read [ 446.282378][T17587] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.297908][T17587] Buffer I/O error on dev nbd0, logical block 1, async page read [ 446.306424][T17587] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.321602][T17587] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 446.332442][T14623] ldm_validate_partition_table(): Disk read failed. [ 446.350798][T14623] Dev nbd0: unable to read RDB block 0 [ 446.361525][T14623] nbd0: unable to read partition table [ 446.378588][ T5641] Bluetooth: hci4: command tx timeout [ 446.403326][T14623] ldm_validate_partition_table(): Disk read failed. [ 446.441297][T14623] Dev nbd0: unable to read RDB block 0 [ 446.477776][T14623] nbd0: unable to read partition table [ 446.778413][T13406] wlan0: Trigger new scan to find an IBSS to join [ 446.825739][ T759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.962851][ T759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.053720][ T759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.095367][ T759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.231332][ T759] bridge_slave_1: left allmulticast mode [ 447.237208][ T759] bridge_slave_1: left promiscuous mode [ 447.243232][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.254067][ T759] bridge_slave_0: left allmulticast mode [ 447.261959][ T759] bridge_slave_0: left promiscuous mode [ 447.267661][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.357548][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.368491][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.379852][ T759] bond0 (unregistering): Released all slaves [ 447.496077][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 447.589163][ T759] hsr_slave_0: left promiscuous mode [ 447.594937][ T759] hsr_slave_1: left promiscuous mode [ 447.601243][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.608812][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.616486][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.625297][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.636482][ T759] veth1_macvtap: left promiscuous mode [ 447.642246][ T759] veth0_macvtap: left promiscuous mode [ 447.648208][ T759] veth1_vlan: left promiscuous mode [ 447.653472][ T759] veth0_vlan: left promiscuous mode [ 447.813433][ T759] team0 (unregistering): Port device team_slave_1 removed [ 447.824048][ T759] team0 (unregistering): Port device team_slave_0 removed [ 447.863214][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 448.131765][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 448.184306][ T759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.243484][ T759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.293422][ T759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.322388][ T759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.361405][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 448.413232][ T759] bridge_slave_1: left allmulticast mode [ 448.422348][ T759] bridge_slave_1: left promiscuous mode [ 448.428091][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.436067][ T759] bridge_slave_0: left allmulticast mode [ 448.441839][ T759] bridge_slave_0: left promiscuous mode [ 448.447465][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.502780][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.512592][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.522053][ T759] bond0 (unregistering): Released all slaves [ 448.688798][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.696225][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.704637][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.712405][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.722838][ T759] veth1_macvtap: left promiscuous mode [ 448.730926][ T759] veth0_macvtap: left promiscuous mode [ 448.736479][ T759] veth1_vlan: left promiscuous mode [ 448.742016][ T759] veth0_vlan: left promiscuous mode [ 448.847339][ T759] team0 (unregistering): Port device team_slave_1 removed [ 448.858226][ T759] team0 (unregistering): Port device team_slave_0 removed [ 448.915815][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 449.205326][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 449.397514][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7 [ 449.608740][ T5286] 8021q: adding VLAN 0 to HW filter on device eth8 [ 449.738489][ T759] wlan0: Trigger new scan to find an IBSS to join [ 450.638009][T13406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50